Known vulnerabilities in QRadar App SDK

Vendor: IBM Corporation
Software: QRadar App SDK
Software CPE: cpe:2.3:a:ibm_corporation:qradar_app_sdk:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar App SDK QRadar App SDK is affected by 24 known vulnerabilities: 1 high, 15 medium, 8 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125339 - Out-of-bounds read
CVE-2026-39892		 CWE-125 Low
No
No
 2.2.5 08.04.2026 SB2026040897
SB20260408162
SB20260408163
and 10 more
#VU125338 - Improper Certificate Validation
CVE-2026-34073		 CWE-295 Medium
No
No
 2.2.5 08.04.2026 SB2026040896
SB20260408119
SB20260408120
and 8 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 2.2.5 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 28 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 2.2.5 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU120975 - Cryptographic Issues
CVE-2025-69277		 CWE-310 Medium
No
No
 2.2.5 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 17 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 2.2.5 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 2.2.5 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU111980 - Protection Mechanism Failure
CVE-2025-50182		 CWE-693 Low
No
No
 2.2.4 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 21 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 2.2.4 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 54 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 2.2.4 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 2.2.4 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 58 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 2.2.4 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 2.2.2 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 49 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 2.2.2 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 2.2.2 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 193 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 2.2.2 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 116 more
#VU89133 - Argument Injection or Modification
CVE-2024-34062		 CWE-88 Low
No
No
 2.2.2 03.05.2024 SB2024050322
SB2024050701
SB2024050702
and 16 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 2.2.2 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU87129 - NULL Pointer Dereference
CVE-2024-26130		 CWE-476 Medium
No
No
 2.2.1 05.03.2024 SB2024030534
SB2024030535
SB2024030546
and 41 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 2.2.1 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more


Showing elements 1 - 20 out of 24