Known vulnerabilities in QRadar Investigation Assistant

Known vulnerabilities in QRadar Investigation Assistant

Vendor: IBM Corporation

Software: QRadar Investigation Assistant

Software CPE: cpe:2.3:a:ibm_corporation:qradar_investigation_assistant:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 10

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343	CWE-22	High	No	No	1.2.0	17.10.2025	SB2025101702 SB2025101703 SB2025101704 and 22 more
#VU115167 - Allocation of Resources Without Limits or Throttling CVE-2025-58754	CWE-770	Medium	Available	No	1.2.0	12.09.2025	SB2025091204 SB2025100104 SB2025100912 and 51 more
#VU113173 - Use of Insufficiently Random Values CVE-2025-7783	CWE-330	Medium	Available	No	1.1.1	23.07.2025	SB2025072332 SB2025072333 SB2025081876 and 62 more
#VU112890 - Inefficient Regular Expression Complexity CVE-2025-5889	CWE-1333	Low	No	No	1.1.0	15.07.2025	SB2025071511 SB2025071512 SB2025071513 and 33 more
#VU112157 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-48387	CWE-22	High	No	No	1.1.0	03.07.2025	SB2025070352 SB2025070353 SB2025070354 and 13 more
#VU111980 - Protection Mechanism Failure CVE-2025-50182	CWE-693	Low	No	No	1.1.0	26.06.2025	SB2025062659 SB2025062660 SB2025062662 and 21 more
#VU111979 - Protection Mechanism Failure CVE-2025-50181	CWE-693	Low	No	No	1.1.0	26.06.2025	SB2025062659 SB2025062660 SB2025062662 and 54 more
#VU111716 - Insufficiently Protected Credentials CVE-2024-47081	CWE-522	Medium	No	No	1.1.0	21.06.2025	SB2025062111 SB2025062112 SB2025062113 and 95 more
#VU109059 - Cryptographic Issues CVE-2025-47278	CWE-310	Low	No	No	1.1.0	13.05.2025	SB2025051380 SB20250521103 SB2025052950 and 11 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791	CWE-79	Low	No	No	1.1.1	17.03.2025	SB2025031740 SB2025031741 SB2025031771 and 35 more