Known vulnerabilities in IBM QRadar WinCollect Agent - page 4

Vendor: IBM Corporation
Software: IBM QRadar WinCollect Agent
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_wincollect_agent:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 87
Public exploits: 4
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM QRadar WinCollect Agent IBM QRadar WinCollect Agent is affected by 87 known vulnerabilities: 4 high, 49 medium, 34 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 10.1.2 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 10.1.2 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916		 CWE-319 Medium
No
No
 10.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915		 CWE-415 Medium
No
No
 10.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260		 CWE-121 Low
No
No
 10.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221		 CWE-440 Medium
No
No
 10.1.1 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 10.1.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 10.1.1 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 10.1.1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 10.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 10.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 10.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 10.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473		 CWE-789 Low
No
No
 10.0.2 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-1434		 CWE-300 Low
No
No
 10.0.2 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 10 more
#VU62766 - Security Features
CVE-2022-1343		 CWE-254 Medium
No
No
 10.0.2 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 14 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 10.0.2 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 10.0.2 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 10.1.1 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 10.0.2 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more


Showing elements 61 - 80 out of 87