Known vulnerabilities in Qradar Advisor - page 2

Vendor: IBM Corporation
Software: Qradar Advisor
Software CPE: cpe:2.3:a:ibm_corporation:qradar_advisor:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 41
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Qradar Advisor Qradar Advisor is affected by 41 known vulnerabilities: 3 high, 28 medium, 10 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105797 - Server-Side Request Forgery (SSRF)
CVE-2024-49822		 CWE-918 Low
No
No
 2.6.6 17.03.2025 SB20250317122
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 2.6.6 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 2.6.6 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 2.6.6 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 2.6.6 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU82326 - Command injection
CVE-2021-23727		 CWE-77 Medium
No
No
 2.6.4 24.10.2023 SB2023102426
SB2024090945
SB2022010640
and 1 more
#VU72340 - Improper input validation
CVE-2023-23934		 CWE-20 Low
No
No
 2.6.5 16.02.2023 SB2023021673
SB2023031332
SB2023031613
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 2.6.5 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 2.6.5 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71193 - Integer overflow
CVE-2023-22458		 CWE-190 Medium
No
No
 2.6.5 16.01.2023 SB2023011657
SB2023020740
SB2023053119
and 8 more
#VU71192 - Integer overflow
CVE-2022-35977		 CWE-190 Medium
No
No
 2.6.5 16.01.2023 SB2023011657
SB2023020661
SB2023020740
and 17 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Available
No
 2.6.5 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 2.6.4 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64011 - Improper input validation
CVE-2018-25031		 CWE-20 Low
Available
No
 2.6.4 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU62692 - NULL Pointer Dereference
CVE-2022-24736		 CWE-476 Medium
No
No
 2.6.5 29.04.2022 SB2022042901
SB2022060701
SB2022092953
and 15 more
#VU54077 - Resource exhaustion
CVE-2021-33503		 CWE-400 Medium
No
No
 2.6.2 13.06.2021 SB2021061304
SB2021061305
SB2021071501
and 36 more
#VU53000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29489		 CWE-79 Low
No
No
 2.6.5 10.05.2021 SB2021051010
SB2022080802
SB2023053119
and 2 more
#VU50990 - Integer overflow
CVE-2020-36242		 CWE-190 High
No
No
 2.6.2 28.02.2021 SB2021022812
SB2021022813
SB2021052024
and 27 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493		 CWE-185 Medium
No
No
 2.6.2 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more
#VU36063 - Improper input validation
CVE-2018-20801		 CWE-20 Medium
No
No
 2.6.5 14.03.2019 SB2019031416
SB2023033135
SB2023053119


Showing elements 21 - 40 out of 41