Known vulnerabilities in IBM Qradar SIEM - page 70

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29849		 CWE-79 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 01.12.2021 SB2021120116
#VU56393 - Use After Free
CVE-2021-3715		 CWE-416 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 08.09.2021 SB2021090806
SB2021090918
SB2021090919
and 31 more
#VU55864 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29880		 CWE-200 Medium
No
No
 7.4.3 Fix Pack 2 16.08.2021 SB2021081610
#VU53816 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20380		 CWE-200 Medium
No
No
 - 04.06.2021 SB2021060408
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51939 - Improper input validation
CVE-2021-22696		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 06.04.2021 SB2021040608
SB2021120219
SB2021120336
and 8 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492		 CWE-264 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU49857 - Improper input validation
CVE-2020-13954		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 20.01.2021 SB2021012079
SB2021042320
SB2021120219
and 7 more
#VU27702 - Resource exhaustion
CVE-2020-7226		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 12.05.2020 SB2020012423
SB2021101936
SB2021120219
and 4 more
#VU21785 - Improper input validation
CVE-2019-9924		 CWE-20 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 15.10.2019 SB2019032210
SB2019040917
SB2020040114
and 11 more
#VU35193 - Memory corruption
CVE-2018-11768		 CWE-119 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 04.10.2019 SB2017060509
SB2021120219
SB2021120336
and 3 more
#VU18689 - Permissions, Privileges, and Access Controls
CVE-2018-8029		 CWE-264 High
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 06.06.2019 SB2019060604
SB2021120219
SB2021120336
and 4 more
#VU17335 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-1733		 CWE-451 Low
No
No
 7.2.8 Patch 14, 7.3.1 Patch 7 24.01.2019 SB2019013108
#VU15583 - Double Free
CVE-2018-18751		 CWE-415 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 30.10.2018 SB2018103007
SB2019082503
SB2019110609
and 14 more
#VU14121 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1612		 CWE-200 Low
Available
No
 7.2.8 Patch 12 30.07.2018 SB2018060610
#VU13057 - Permissions, Privileges, and Access Controls
CVE-2017-1721		 CWE-264 High
No
No
 - 30.05.2018 SB2018053010
#VU13056 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-1722		 CWE-89 Low
No
No
 - 28.05.2018 SB2018053010


Showing elements 1381 - 1400 out of 1402