Known vulnerabilities in IBM Qradar SIEM - page 62

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1424
Public exploits: 87
Known exploited (KEV): 24

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1424 known vulnerabilities: 8 critical, 141 high, 452 medium, 823 low Critical High Medium Low

Vulnerabilities (1424)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26274		 CWE-79 Medium
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77648 - Improper Access Control
CVE-2023-26273		 CWE-284 Low
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77647 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-26276		 CWE-327 Low
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU75561 - Improper input validation
CVE-2023-20860		 CWE-20 Medium
No
No
 7.5.0 Update Pack 6 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU71108 - Out-of-bounds write
CVE-2022-45685		 CWE-787 Medium
No
No
 7.5.0 Update Pack 6 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 7.5.0 Update Pack 6 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 7.5.0 Update Pack 6 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64471 - Improper Verification of Cryptographic Signature
CVE-2021-22573		 CWE-347 Low
No
No
 - 17.06.2022 SB2022061720
SB2022061804
SB2022062732
and 14 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 7.5.0 Update Pack 6 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU58295 - Resource Management Errors
CVE-2021-3733		 CWE-399 Low
No
No
 7.5.0 Update Pack 6 23.11.2021 SB2021112309
SB2021122214
SB2022050235
and 41 more
#VU49379 - Deserialization of Untrusted Data
CVE-2020-35490		 CWE-502 High
No
No
 7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49380 - Deserialization of Untrusted Data
CVE-2020-35491		 CWE-502 High
No
No
 7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU47648 - Improper Certificate Validation
CVE-2020-13955		 CWE-295 Medium
No
No
 7.5.0 Update Pack 6 09.10.2020 SB2020101501
SB2023062274
SB2025090824
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116		 CWE-93 Medium
No
No
 7.5.0 Update Pack 6 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971		 CWE-350 Medium
No
No
 7.5.0 Update Pack 6 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more
#VU31958 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18348		 CWE-74 Medium
No
No
 7.5.0 Update Pack 6 23.10.2019 SB2019102324
SB2020052312
SB2020042173
and 13 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 7.5.0 Update Pack 6 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 7.5.0 Update Pack 6 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 7.5.0 Update Pack 6 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 29 more


Showing elements 1221 - 1240 out of 1424