Known vulnerabilities in IBM Security QRadar Analyst Workflow

Vendor: IBM Corporation
Software: IBM Security QRadar Analyst Workflow
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_qradar_analyst_workflow:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 68
Public exploits: 9
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security QRadar Analyst Workflow IBM Security QRadar Analyst Workflow is affected by 68 known vulnerabilities: 1 critical, 4 high, 45 medium, 18 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119893 - Deserialization of Untrusted Data
CVE-2025-67779		 CWE-502 Medium
No
No
 3.0.1 12.12.2025 SB2025121219
SB2025121222
SB2025122225
and 2 more
#VU119891 - Deserialization of Untrusted Data
CVE-2025-55184		 CWE-502 Medium
Available
No
 3.0.1 12.12.2025 SB2025121219
SB2025121220
SB2025122225
and 2 more
#VU119890 - Exposure of sensitive information to an unauthorized actor
CVE-2025-55183		 CWE-200 Medium
Available
No
 3.0.1 12.12.2025 SB2025121219
SB2025121221
SB2025122225
and 2 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 3.0.1 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU119103 - Deserialization of Untrusted Data
CVE-2025-55182		 CWE-502 Critical
Available
Exploited
 3.0.1 03.12.2025 SB2025120333
SB2025121823
SB2025121829
and 6 more
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798		 CWE-59 Low
No
No
 3.0.1 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 3.0.1 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU114574 - Use of Cache Containing Sensitive Information
CVE-2025-57752		 CWE-524 Medium
No
No
 3.0.1 30.08.2025 SB2025083005
SB2025101766
SB2025120245
and 7 more
#VU114573 - Improper input validation
CVE-2025-55173		 CWE-20 Low
No
No
 3.0.1 30.08.2025 SB2025083004
SB2025101766
SB2025120245
and 7 more
#VU114571 - Server-Side Request Forgery (SSRF)
CVE-2025-57822		 CWE-918 Medium
No
No
 3.0.1 30.08.2025 SB2025083002
SB2025101766
SB2025120303
and 5 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 3.0.1 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 63 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 3.0.1 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 34 more
#VU109244 - Missing release of memory after effective lifetime
CVE-2025-47279		 CWE-401 Medium
No
No
 3.0.1 16.05.2025 SB2025051606
SB2025052019
SB2025090104
and 5 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 3.0.1 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 46 more
#VU105939 - Improper Authorization
CVE-2025-29927		 CWE-285 High
Available
Exploited
 3.0.1 21.03.2025 SB2025032132
SB2025052304
SB2025061612
and 5 more
#VU76187 - Incorrect Regular Expression
CVE-2021-23346		 CWE-185 Medium
No
No
 2.31.4 16.05.2023 SB2023051647
SB2023051653
SB2023071921
and 1 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 2.31.4 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155		 CWE-200 Low
No
No
 2.31.4 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU61668 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0536		 CWE-200 Low
No
No
 2.31.4 28.03.2022 SB2022032841
SB2022032843
SB2022042561
and 27 more
#VU26151 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7598		 CWE-94 Medium
No
No
 2.31.4 18.03.2020 SB2020031805
SB2020072216
SB2020061308
and 18 more


Showing elements 1 - 20 out of 68