Known vulnerabilities in QRadar Pre-Validation App

Vendor: IBM Corporation
Software: QRadar Pre-Validation App
Software CPE: cpe:2.3:a:ibm_corporation:qradar_pre-validation_app:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 17
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Pre-Validation App QRadar Pre-Validation App is affected by 17 known vulnerabilities: 1 high, 11 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119893 - Deserialization of Untrusted Data
CVE-2025-67779		 CWE-502 Medium
No
No
 2.0.2 12.12.2025 SB2025121219
SB2025121222
SB2025122225
and 2 more
#VU119891 - Deserialization of Untrusted Data
CVE-2025-55184		 CWE-502 Medium
Available
No
 2.0.2 12.12.2025 SB2025121219
SB2025121220
SB2025122225
and 2 more
#VU119890 - Exposure of sensitive information to an unauthorized actor
CVE-2025-55183		 CWE-200 Medium
Available
No
 2.0.2 12.12.2025 SB2025121219
SB2025121221
SB2025122225
and 2 more
#VU114574 - Use of Cache Containing Sensitive Information
CVE-2025-57752		 CWE-524 Medium
No
No
 2.0.2 30.08.2025 SB2025083005
SB2025101766
SB2025120245
and 7 more
#VU114573 - Improper input validation
CVE-2025-55173		 CWE-20 Low
No
No
 2.0.2 30.08.2025 SB2025083004
SB2025101766
SB2025120245
and 7 more
#VU114571 - Server-Side Request Forgery (SSRF)
CVE-2025-57822		 CWE-918 Medium
No
No
 2.0.2 30.08.2025 SB2025083002
SB2025101766
SB2025120303
and 5 more
#VU109922 - Missing Origin Validation in WebSockets
CVE-2025-48068		 CWE-1385 Low
No
No
 2.0.2 29.05.2025 SB2025052970
SB2025122227
SB2026010925
and 4 more
#VU109239 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32421		 CWE-362 Low
Available
No
 2.0.2 16.05.2025 SB2025051603
SB2026030306
SB2026031635
#VU105939 - Improper Authorization
CVE-2025-29927		 CWE-285 High
Available
Exploited
 2.0.2 21.03.2025 SB2025032132
SB2025052304
SB2025061612
and 5 more
#VU103116 - Improper Authorization
CVE-2024-51479		 CWE-285 Medium
No
No
 2.0.2 21.01.2025 SB2025012133
SB2025060972
SB2026030306
and 1 more
#VU103115 - Resource Management Errors
CVE-2024-56332		 CWE-399 Medium
No
No
 2.0.2 21.01.2025 SB2025012132
SB2025060529
SB2025060970
and 1 more
#VU98500 - Resource exhaustion
CVE-2024-47831		 CWE-400 Medium
No
No
 2.0.1 14.10.2024 SB2024101466
SB2024112517
SB2024112818
and 2 more
#VU97476 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2024-46982		 CWE-349 Medium
Available
No
 2.0.1 18.09.2024 SB2024091832
SB2024110841
SB2024112517
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.0.1 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU89341 - Server-Side Request Forgery (SSRF)
CVE-2024-34351		 CWE-918 Medium
Available
No
 2.0.1 10.05.2024 SB2024051026
SB2024072607
SB2024112517
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 2.0.1 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 2.0.1 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more