Known vulnerabilities in IBM Qradar SIEM - page 58

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1424
Public exploits: 87
Known exploited (KEV): 24

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1424 known vulnerabilities: 8 critical, 141 high, 452 medium, 823 low Critical High Medium Low

Vulnerabilities (1424)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81889 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-30994
CWE-327 Medium
No
No
7.5.0 Update Pack 7 11.10.2023 SB2023101151
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Available
No
7.5.0 Update Pack 7 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 74 more
#VU77612 - Resource exhaustion
CVE-2023-2828
CWE-400 Medium
No
No
7.5.0 Update Pack 7 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU77228 - Resource exhaustion
CVE-2023-34149
CWE-400 Medium
No
No
7.5.0 Update Pack 7 13.06.2023 SB2023061351
SB2023070502
SB2023071316
and 7 more
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Available
No
7.5.0 Update Pack 7 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
7.5.0 Update Pack 7 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
7.5.0 Update Pack 7 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143
CWE-94 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363
CWE-200 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946
CWE-276 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704
CWE-94 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU68442 - Improper input validation
CVE-2022-21619
CWE-20 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU66748 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5259
CWE-94 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 24.08.2022 SB20200310151
SB2022082433
SB2023031611
and 8 more
#VU63085 - Improper input validation
CVE-2022-22971
CWE-20 Medium
Available
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU63084 - Improper input validation
CVE-2022-22970
CWE-20 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450
CWE-94 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 42 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437
CWE-835 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785
CWE-79 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494
CWE-74 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU13547 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-8036
CWE-835 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 03.07.2018 SB2018070304
SB2018090711
SB2018102421
and 7 more


Showing elements 1141 - 1160 out of 1424