Known vulnerabilities in QRadar Assistant

Vendor: IBM Corporation
Software: QRadar Assistant
Software CPE: cpe:2.3:a:ibm_corporation:qradar_assistant:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Assistant QRadar Assistant is affected by 48 known vulnerabilities: 6 high, 32 medium, 10 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 3.8.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 3.8.0 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 3.7.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 3.7.0 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 3.7.0 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU82326 - Command injection
CVE-2021-23727		 CWE-77 Medium
No
No
 3.8.0 24.10.2023 SB2023102426
SB2024090945
SB2022010640
and 1 more
#VU82200 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-45145		 CWE-362 Low
No
No
 3.8.1 18.10.2023 SB2023101841
SB2023101848
SB2023101849
and 30 more
#VU78506 - Heap-based Buffer Overflow
CVE-2022-24834		 CWE-122 Medium
Available
No
 3.8.1 21.07.2023 SB2023072126
SB2023072127
SB2023072128
and 21 more
#VU75177 - Improper input validation
CVE-2023-28856		 CWE-20 Medium
No
No
 3.8.1 17.04.2023 SB2023041725
SB2023050823
SB2023052621
and 19 more
#VU72340 - Improper input validation
CVE-2023-23934		 CWE-20 Low
No
No
 3.7.0 16.02.2023 SB2023021673
SB2023031332
SB2023031613
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 3.7.0 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU62693 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24735		 CWE-94 Medium
No
No
 3.8.1 29.04.2022 SB2022042901
SB2022060701
SB2022071948
and 14 more
#VU62692 - NULL Pointer Dereference
CVE-2022-24736		 CWE-476 Medium
No
No
 3.8.1 29.04.2022 SB2022042901
SB2022060701
SB2022092953
and 15 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493		 CWE-185 Medium
No
No
 3.7.0 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more
#VU23000 - Exposure of sensitive information to an unauthorized actor
CVE-2016-10745		 CWE-200 Low
No
No
 3.7.0 26.11.2019 SB2016123002
SB2019112613
SB2019120317
and 7 more
#VU22814 - Integer overflow
CVE-2019-19012		 CWE-190 High
No
No
 3.8.1 18.11.2019 SB2019111806
SB2023021411
SB2024012468
and 19 more
#VU30789 - Resource exhaustion
CVE-2019-16163		 CWE-400 Medium
No
No
 3.8.1 09.09.2019 SB2019090921
SB2022092145
SB2022110232
and 24 more
#VU20904 - Use After Free
CVE-2019-13224		 CWE-416 High
No
No
 3.8.1 06.09.2019 SB2019090602
SB2019092002
SB2019100314
and 26 more
#VU19553 - Improper input validation
CVE-2019-14322		 CWE-20 Medium
Available
No
 3.7.0 29.07.2019 SB2019072807
SB2024031236
SB2024043020
#VU31406 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10516		 CWE-79 Low
No
No
 3.7.0 23.10.2017 SB2017102313
SB2024043020
SB2017112149
and 2 more


Showing elements 1 - 20 out of 48