Known vulnerabilities in IBM Qradar SIEM - page 9
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
1402
Public exploits:
87
Known exploited (KEV):
24
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (1402)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112646 - Product UI does not Warn User of Unsafe Actions CVE-2025-46835 |
CWE-356 | Medium | 7.5.0 Update Pack 13 IF01 | 09.07.2025 |
SB2025070994 SB20250709121 SB2025071019 and 22 more |
||
| #VU112643 - Improper input validation CVE-2025-27614 |
CWE-20 | High | 7.5.0 Update Pack 13 IF01 | 09.07.2025 |
SB2025070994 SB20250709119 SB2025071019 and 18 more |
||
| #VU112642 - Protection Mechanism Failure CVE-2025-27613 |
CWE-693 | High | 7.5.0 Update Pack 13 IF01 | 09.07.2025 |
SB2025070994 SB20250709122 SB2025071019 and 22 more |
||
| #VU112638 - Improper input validation CVE-2025-48385 |
CWE-20 | High | 7.5.0 Update Pack 13 IF01 | 09.07.2025 |
SB2025070989 SB2025070990 SB2025070991 and 38 more |
||
| #VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2025-48384 |
CWE-93 | Medium | 7.5.0 Update Pack 13 IF01 | 09.07.2025 |
SB2025070989 SB2025070990 SB2025070991 and 52 more |
||
| #VU111912 - Heap-based Buffer Overflow CVE-2025-48060 |
CWE-122 | Medium | 7.5.0 Update Pack 13 IF01 | 25.06.2025 |
SB2025032035 SB2025070824 SB2025070826 and 38 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 7.5.0 Update Pack 13 IF01 | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU109423 - Exposure of sensitive information to an unauthorized actor CVE-2024-43420 |
CWE-200 | Low | 7.5.0 Update Pack 13 IF01 | 19.05.2025 |
SB2025051947 SB2025051953 SB2025051954 and 11 more |
||
| #VU108247 - Use After Free CVE-2025-23150 |
CWE-416 | Low | 7.5.0 Update Pack 13 IF01 | 02.05.2025 |
SB20250502152 SB2025052345 SB2025061222 and 65 more |
||
| #VU108241 - Use After Free CVE-2025-37738 |
CWE-416 | Low | 7.5.0 Update Pack 13 IF01 | 02.05.2025 |
SB20250502146 SB2025060678 SB2025060679 and 59 more |
||
| #VU108204 - Missing release of memory after effective lifetime CVE-2022-49788 |
CWE-401 | Low | 7.5.0 Update Pack 13 IF01 | 02.05.2025 |
SB20250502105 SB2025053054 SB2025061221 and 32 more |
||
| #VU106956 - Use After Free CVE-2025-22004 |
CWE-416 | Low | 7.5.0 Update Pack 13 IF01 | 03.04.2025 |
SB2025040374 SB20250422196 SB2025050998 and 89 more |
||
| #VU106647 - Out-of-bounds read CVE-2025-21991 |
CWE-125 | Low | 7.5.0 Update Pack 13 IF01 | 02.04.2025 |
SB2025040248 SB20250422196 SB2025052639 and 65 more |
||
| #VU105071 - Resource Management Errors CVE-2024-58002 |
CWE-399 | Low | 7.5.0 Update Pack 13 IF01 | 27.02.2025 |
SB20250227166 SB2025040917 SB2025040929 and 72 more |
||
| #VU104971 - Use After Free CVE-2024-57980 |
CWE-416 | Low | 7.5.0 Update Pack 13 IF01 | 27.02.2025 |
SB2025022769 SB20250403105 SB20250403106 and 79 more |
||
| #VU104802 - Memory corruption CVE-2022-49058 |
CWE-119 | Low | 7.5.0 Update Pack 13 IF01 | 26.02.2025 |
SB20250226636 SB2025032664 SB2025040916 and 18 more |
||
| #VU102870 - Improper Encoding or Escaping of Output CVE-2024-50349 |
CWE-116 | Low | 7.5.0 Update Pack 13 IF01 | 16.01.2025 |
SB2025011640 SB2025011641 SB2025011643 and 21 more |
||
| #VU102869 - Improper Encoding or Escaping of Output CVE-2024-52006 |
CWE-116 | Low | 7.5.0 Update Pack 13 IF01 | 16.01.2025 |
SB2025011640 SB2025011641 SB2025011643 and 21 more |
||
| #VU101797 - Insecure Temporary File CVE-2024-54661 |
CWE-377 | Low | 7.5.0 Update Pack 13 IF01 | 16.12.2024 |
SB2024121640 SB2024121649 SB2024121650 and 30 more |
||
| #VU27258 - Insufficiently Protected Credentials CVE-2020-5260 |
CWE-522 | Medium | 7.5.0 Update Pack 13 IF01 | 23.04.2020 |
SB2020042343 SB2020042344 SB2020042345 and 27 more |
Showing elements 161 - 180 out of 1402