Known vulnerabilities in IBM Qradar SIEM - page 66

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67950 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22480		 CWE-200 Medium
No
No
 7.4.3 Fix Pack 7, 7.5.0 Update Pack 3 06.10.2022 SB2022100601
#VU56504 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38647		 CWE-94 High
Available
Exploited
 - 14.09.2021 SB2021091418
SB2022090129
SB2022091908
and 1 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU51796 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-28657		 CWE-835 Medium
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 30.03.2021 SB2021033021
SB2022042284
SB2021062232
and 4 more
#VU51198 - Out-of-bounds write
CVE-2021-20233		 CWE-787 Low
Available
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 37 more
#VU51197 - Out-of-bounds write
CVE-2021-20225		 CWE-787 Low
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 37 more
#VU51196 - Improper preservation of permissions
CVE-2021-3418		 CWE-281 Low
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021092209
SB2022090804
#VU51193 - Stack-based buffer overflow
CVE-2020-27749		 CWE-121 Low
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 37 more
#VU51189 - Out-of-bounds write
CVE-2020-25647		 CWE-787 Low
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 35 more
#VU51188 - Use After Free
CVE-2020-25632		 CWE-416 Low
Available
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 37 more
#VU51014 - Resource Management Errors
CVE-2021-25122		 CWE-399 Medium
No
No
 7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329		 CWE-502 Medium
No
No
 7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU50684 - Improper input validation
CVE-2020-13949		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more
#VU48779 - Resource Management Errors
CVE-2020-17527		 CWE-399 Medium
No
No
 7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1 03.12.2020 SB2020120401
SB2020120509
SB2020120510
and 21 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 1301 - 1320 out of 1402