Known vulnerabilities in IBM Qradar SIEM - page 60

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1424
Public exploits: 87
Known exploited (KEV): 24

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1424 known vulnerabilities: 8 critical, 141 high, 452 medium, 823 low Critical High Medium Low

Vulnerabilities (1424)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40367		 CWE-79 Medium
No
No
 7.5.0 Update Pack 7 11.10.2023 SB2023101151
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 7.5.0 Update Pack 7 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77127 - Information Exposure Through Log Files
CVE-2023-20859		 CWE-532 Medium
No
No
 7.5.0 Update Pack 6 09.06.2023 SB2023060927
SB2023070708
SB2023100926
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 7.5.0 Update Pack 7 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU75508 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30441		 CWE-200 Medium
No
No
 7.5.0 Update Pack 7 26.04.2023 SB2023042618
SB2023042749
SB2023050107
and 41 more
#VU74824 - Double Free
CVE-2023-1999		 CWE-415 High
No
No
 7.5.0 Update Pack 6 11.04.2023 SB2023041129
SB2023041192
SB2023042845
and 40 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 7.5.0 Update Pack 6 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31159		 CWE-22 Medium
No
No
 - 08.03.2023 SB2023030823
SB2023030915
SB2023042635
and 15 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 7.5.0 Update Pack 7 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 7.5.0 Update Pack 6 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU70442 - Stack-based buffer overflow
CVE-2022-4378		 CWE-121 Low
No
No
 7.5.0 Update Pack 6 20.12.2022 SB2022122008
SB2022122123
SB2022122124
and 124 more
#VU69296 - Out-of-bounds write
CVE-2022-43750		 CWE-787 Low
No
No
 7.5.0 Update Pack 6 14.11.2022 SB2022111443
SB2022113032
SB2022113033
and 72 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 7.5.0 Update Pack 6 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 7.5.0 Update Pack 6 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 7.5.0 Update Pack 6 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 7.5.0 Update Pack 6 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU62361 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43138		 CWE-94 Medium
No
No
 7.5.0 Update Pack 6 15.04.2022 SB2022041532
SB2022041533
SB2022062103
and 33 more


Showing elements 1181 - 1200 out of 1424