Known vulnerabilities in Qradar Advisor

Vendor: IBM Corporation
Software: Qradar Advisor
Software CPE: cpe:2.3:a:ibm_corporation:qradar_advisor:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 41
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Qradar Advisor Qradar Advisor is affected by 41 known vulnerabilities: 3 high, 28 medium, 10 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 2.6.6 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 2.6.6 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 2.6.6 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 2.6.6 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 2.6.6 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 2.6.6 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 2.6.6 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 2.6.6 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 2.6.6 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU96730 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6221		 CWE-200 Medium
No
No
 2.6.6 03.09.2024 SB2024090356
SB2024092768
SB2024100968
and 5 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 2.6.6 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU94747 - Improper Output Neutralization for Logs
CVE-2024-1681		 CWE-117 Medium
No
No
 2.6.6 26.07.2024 SB2024072606
SB2024072607
SB2024072610
and 7 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 2.6.6 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 2.6.6 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89381 - Uncontrolled Recursion
CVE-2024-4340		 CWE-674 Medium
No
No
 2.6.6 13.05.2024 SB2024051329
SB2024051330
SB2024051352
and 15 more
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 2.6.6 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 42 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 2.6.6 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 2.6.6 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 2.6.6 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 2.6.6 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more


Showing elements 1 - 20 out of 41