Known vulnerabilities in QRadar Suite

Vendor: IBM Corporation
Software: QRadar Suite
Software CPE: cpe:2.3:a:ibm_corporation:qradar:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 286
Public exploits: 26
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Suite QRadar Suite is affected by 286 known vulnerabilities: 3 critical, 33 high, 192 medium, 58 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124031 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57352		 CWE-1321 Medium
No
No
 1.11.9.0 16.03.2026 SB2026031634
SB2026031635
#VU124030 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57350		 CWE-1321 High
No
No
 1.11.9.0 16.03.2026 SB2026031633
SB2026031635
#VU119103 - Deserialization of Untrusted Data
CVE-2025-55182		 CWE-502 Critical
Available
Exploited
 - 03.12.2025 SB2025120333
SB2025121823
SB2025121829
and 6 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 1.11.9.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 1.11.9.0 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287		 CWE-20 Medium
No
No
 1.11.9.0 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU114574 - Use of Cache Containing Sensitive Information
CVE-2025-57752		 CWE-524 Medium
No
No
 1.11.9.0 30.08.2025 SB2025083005
SB2025101766
SB2025120245
and 7 more
#VU114573 - Improper input validation
CVE-2025-55173		 CWE-20 Low
No
No
 1.11.9.0 30.08.2025 SB2025083004
SB2025101766
SB2025120245
and 7 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 1.11.9.0 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 1.11.9.0 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU109922 - Missing Origin Validation in WebSockets
CVE-2025-48068		 CWE-1385 Low
No
No
 1.11.9.0 29.05.2025 SB2025052970
SB2025122227
SB2026010925
and 4 more
#VU109239 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32421		 CWE-362 Low
Available
No
 1.11.9.0 16.05.2025 SB2025051603
SB2026030306
SB2026031635
#VU105939 - Improper Authorization
CVE-2025-29927		 CWE-285 High
Available
Exploited
 1.11.9.0 21.03.2025 SB2025032132
SB2025052304
SB2025061612
and 5 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 1.11.3.0 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 1.11.9.0 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 26 more
#VU103116 - Improper Authorization
CVE-2024-51479		 CWE-285 Medium
No
No
 1.11.9.0 21.01.2025 SB2025012133
SB2025060972
SB2026030306
and 1 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 1.11.9.0 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 1.11.3.0 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98500 - Resource exhaustion
CVE-2024-47831		 CWE-400 Medium
No
No
 1.11.9.0 14.10.2024 SB2024101466
SB2024112517
SB2024112818
and 2 more
#VU86835 - Deserialization of Untrusted Data
CVE-2020-7660		 CWE-502 High
No
No
 1.11.9.0 27.02.2024 SB2024022730
SB2020070752
SB2026031635
and 2 more


Showing elements 1 - 20 out of 286