Known vulnerabilities in QRadar Suite 1.10.13.0 - page 3

Vendor: IBM Corporation
Software: QRadar Suite
Version: 1.10.13.0
Software CPE: cpe:2.3:a:ibm_corporation:qradar:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 189
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QRadar Suite version 1.10.13.0 QRadar Suite 1.10.13.0 is affected by 189 vulnerabilities: 1 critical, 20 high, 131 medium, 37 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 1.10.21.0 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more
#VU89072 - Sensitive Cookie with Improper SameSite Attribute
CVE-2022-38386		 CWE-1275 Low
No
No
 1.10.20.0 30.04.2024 SB2024043070
#VU88978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47731		 CWE-79 Low
No
No
 1.10.20.0 24.04.2024 SB2024042460
#VU88801 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21501		 CWE-200 Medium
No
No
 1.10.21.0 17.04.2024 SB20240417144
SB20240417145
SB2024050632
and 7 more
#VU88394 - Resource exhaustion
CVE-2024-27088		 CWE-400 Low
No
No
 1.10.21.0 10.04.2024 SB2024041057
SB2024041917
SB2024042201
and 10 more
#VU87583 - Improper input validation
CVE-2024-21503		 CWE-20 Medium
No
No
 1.10.21.0 18.03.2024 SB2024031822
SB2024050632
SB2024061929
and 7 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 1.10.20.0 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86709 - Exposure of sensitive information to an unauthorized actor
CVE-2024-24758		 CWE-200 Low
No
No
 1.10.21.0 22.02.2024 SB2024022211
SB2024022225
SB2024022832
and 13 more
#VU86694 - Improper Access Control
CVE-2024-22234		 CWE-284 Medium
No
No
 1.10.20.0 21.02.2024 SB2024022139
SB2024041137
SB2024061708
and 3 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.10.20.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 100 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 1.10.21.0 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 1.10.21.0 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 1.10.21.0 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU81307 - Improper input validation
CVE-2023-44270		 CWE-20 Low
No
No
 1.10.21.0 02.10.2023 SB2023100210
SB2023111710
SB2023112080
and 28 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU74190 - Improper Access Control
CVE-2023-27561		 CWE-284 Low
No
No
 1.10.21.0 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 1.10.20.0 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU66857 - UNIX Symbolic Link (Symlink) Following
CVE-2015-3627		 CWE-61 Low
No
No
 1.10.21.0 30.08.2022 SB2015051807
SB2022083021
SB2023022316
and 7 more


Showing elements 41 - 60 out of 189