Known vulnerabilities in IBM QRadar Use Case Manager

Known vulnerabilities in IBM QRadar Use Case Manager

Vendor: IBM Corporation

Software: IBM QRadar Use Case Manager

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_use_case_manager:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 15

Public exploits: 1

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-26159	CWE-601	Low	No	No	3.9.0	15.01.2024	SB2024011510 SB2024011517 SB2024011864 and 53 more
#VU83234 - Incorrect Comparison CVE-2023-45133	CWE-697	Low	No	No	3.9.0	17.11.2023	SB2023111710 SB2023111712 SB2023113028 and 26 more
#VU82558 - Cross-Site Request Forgery (CSRF) CVE-2023-45857	CWE-352	Low	No	No	3.9.0	30.10.2023	SB2023103024 SB2023113014 SB2023121224 and 41 more
#VU81884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-2142	CWE-79	Medium	No	No	3.8.0	11.10.2023	SB2023101148 SB2025040875 SB2025040876 and 3 more
#VU81307 - Improper input validation CVE-2023-44270	CWE-20	Low	No	No	3.9.0	02.10.2023	SB2023100210 SB2023111710 SB2023112080 and 28 more
#VU78932 - Incorrect Regular Expression CVE-2022-25883	CWE-185	Medium	No	No	3.9.0	03.08.2023	SB2023080361 SB2023080362 SB2023081514 and 73 more
#VU76691 - Inefficient Regular Expression Complexity CVE-2022-25901	CWE-1333	Medium	No	No	3.8.0	31.05.2023	SB2023053112 SB2023053113 SB2023053143 and 10 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2023-0842	CWE-1321	Medium	No	No	3.8.0	01.05.2023	SB2023050113 SB2023050917 SB2023052413 and 12 more
#VU72247 - Improper input validation CVE-2022-38900	CWE-20	Medium	No	No	3.8.0	15.02.2023	SB2023021531 SB2023022714 SB2023032315 and 35 more
#VU70123 - Improper Control of Generation of Code ('Code Injection') CVE-2022-37601	CWE-94	High	No	No	3.8.0	12.12.2022	SB2022121220 SB2023010419 SB2023011403 and 20 more
#VU70121 - Incorrect Regular Expression CVE-2022-37603	CWE-185	Medium	No	No	3.8.0	12.12.2022	SB2022121221 SB2022121222 SB2023010418 and 29 more
#VU69675 - Improper Control of Generation of Code ('Code Injection') CVE-2022-24999	CWE-94	Medium	Available	No	3.8.0	29.11.2022	SB2022112910 SB2022112911 SB2022112943 and 50 more
#VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244	CWE-200	Medium	No	No	3.6.0	22.08.2022	SB2022082252 SB2022082253 SB2022091110 and 15 more
#VU64874 - Improper input validation CVE-2022-24434	CWE-20	Medium	No	No	3.6.0	04.07.2022	SB2022070404 SB2022081027 SB2022093014 and 9 more
#VU59833 - Exposure of sensitive information to an unauthorized actor CVE-2021-23566	CWE-200	Low	No	No	3.5.0	19.01.2022	SB2022011925 SB2022032843 SB2022061711 and 10 more