Known vulnerabilities in QRadar Assistant - page 2

Vendor: IBM Corporation
Software: QRadar Assistant
Software CPE: cpe:2.3:a:ibm_corporation:qradar_assistant:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Assistant QRadar Assistant is affected by 48 known vulnerabilities: 6 high, 32 medium, 10 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109182 - Inefficient Regular Expression Complexity
CVE-2021-3795		 CWE-1333 High
No
No
 3.6.0 14.05.2025 SB2021091549
SB2022111063
SB2021120933
#VU109181 - Inefficient Regular Expression Complexity
CVE-2021-43307		 CWE-1333 High
No
No
 3.6.0 14.05.2025 SB2022060244
SB2022111063
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 3.7.0 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 3.6.1 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 3.6.1 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 3.7.0 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 3.7.0 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75215 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-25032		 CWE-22 Medium
No
No
 3.7.0 18.04.2023 SB2020083127
SB2023041851
SB2024031227
and 1 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927		 CWE-185 Medium
No
No
 3.6.1 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 3.6.1 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 3.7.0 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU68281 - Incorrect Regular Expression
CVE-2021-3765		 CWE-185 Medium
No
No
 3.6.0 12.10.2022 SB2021110231
SB2022101269
SB2022101801
and 8 more
#VU64941 - Double Free
CVE-2022-31117		 CWE-415 High
No
No
 3.7.0 05.07.2022 SB2022070536
SB2022080433
SB2022120811
and 12 more
#VU64940 - Improper input validation
CVE-2022-31116		 CWE-20 Medium
No
No
 3.7.0 05.07.2022 SB2022070536
SB2022072110
SB2022080433
and 13 more
#VU61917 - Stack-based buffer overflow
CVE-2021-45958		 CWE-121 Medium
No
No
 3.7.0 06.04.2022 SB2022040606
SB2022041910
SB2023011262
and 12 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 3.6.0 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 3.6.0 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU19388 - Credentials Management
CVE-2018-18074		 CWE-255 High
No
No
 3.7.0 26.07.2019 SB2019072007
SB2019080710
SB2020032626
and 18 more
#VU19269 - Improper input validation
CVE-2019-1010083		 CWE-20 Medium
No
No
 3.7.0 19.07.2019 SB2019072205
SB2021062302
SB2023042037
and 1 more
#VU18150 - Improper input validation
CVE-2018-1000656		 CWE-20 Medium
No
No
 3.7.0 08.04.2019 SB2019040802
SB2019040213
SB2020060113
and 4 more


Showing elements 21 - 40 out of 48