Known vulnerabilities in QRadar Suite - page 8

Vendor: IBM Corporation
Software: QRadar Suite
Software CPE: cpe:2.3:a:ibm_corporation:qradar:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 286
Public exploits: 26
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Suite QRadar Suite is affected by 286 known vulnerabilities: 3 critical, 33 high, 192 medium, 58 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 1.10.21.0 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more
#VU89107 - Improper input validation
CVE-2023-47727		 CWE-20 Low
No
No
 1.10.21.0 02.05.2024 SB2024050221
#VU89072 - Sensitive Cookie with Improper SameSite Attribute
CVE-2022-38386		 CWE-1275 Low
No
No
 1.10.20.0 30.04.2024 SB2024043070
#VU88978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47731		 CWE-79 Low
No
No
 1.10.20.0 24.04.2024 SB2024042460
#VU88872 - Cleartext Storage of Sensitive Information
CVE-2024-28782		 CWE-312 Low
No
No
 1.10.19.0 22.04.2024 SB2024042217
#VU88394 - Resource exhaustion
CVE-2024-27088		 CWE-400 Low
No
No
 1.10.21.0 10.04.2024 SB2024041057
SB2024041917
SB2024042201
and 10 more
#VU88199 - Observable discrepancy
CVE-2023-50782		 CWE-203 Medium
No
No
 1.10.20.0 08.04.2024 SB2024040815
SB2024040816
SB2024040817
and 35 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 1.10.20.0 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86694 - Improper Access Control
CVE-2024-22234		 CWE-284 Medium
No
No
 1.10.20.0 21.02.2024 SB2024022139
SB2024041137
SB2024061708
and 3 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 1.10.20.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.10.20.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 1.10.20.0 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 1.10.21.0 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 1.10.21.0 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU81307 - Improper input validation
CVE-2023-44270		 CWE-20 Low
No
No
 1.10.21.0 02.10.2023 SB2023100210
SB2023111710
SB2023112080
and 28 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 1.10.21.0 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 1.10.20.0 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU66857 - UNIX Symbolic Link (Symlink) Following
CVE-2015-3627		 CWE-61 Low
No
No
 1.10.21.0 30.08.2022 SB2015051807
SB2022083021
SB2023022316
and 7 more


Showing elements 141 - 160 out of 286