Known vulnerabilities in QRadar Pulse App

Vendor: IBM Corporation
Software: QRadar Pulse App
Software CPE: cpe:2.3:a:ibm_corporation:qradar_pulse_app:*:*:*:*:*:ibm_qradar_siem:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 47
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QRadar Pulse App QRadar Pulse App is affected by 47 known vulnerabilities: 5 high, 33 medium, 9 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 2.2.16 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 2.2.16 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 2.2.15 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 2.2.15 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 2.2.15 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 2.2.15 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 2.2.15 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU95816 - Server-Side Request Forgery (SSRF)
CVE-2024-29415		 CWE-918 Medium
Available
No
 2.2.14 13.08.2024 SB2024081345
SB2024082612
SB2024082760
and 14 more
#VU88394 - Resource exhaustion
CVE-2024-27088		 CWE-400 Low
No
No
 2.2.14 10.04.2024 SB2024041057
SB2024041917
SB2024042201
and 10 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982		 CWE-444 Medium
No
No
 2.2.14 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983		 CWE-617 Medium
Available
No
 2.2.14 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU87734 - Resource exhaustion
CVE-2024-28863		 CWE-400 Medium
No
No
 2.2.14 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU86374 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-46308		 CWE-1321 High
No
No
 2.2.12 13.02.2024 SB2024021316
SB2024021609
SB2024031413
and 1 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 2.2.11 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 2.2.12 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 2.2.12 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 2.2.12 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 2.2.11 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU76691 - Inefficient Regular Expression Complexity
CVE-2022-25901		 CWE-1333 Medium
No
No
 2.2.10 31.05.2023 SB2023053112
SB2023053113
SB2023053143
and 10 more
#VU56061 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32822		 CWE-200 Medium
No
No
 2.2.11 24.08.2021 SB2021082412
SB2023103042


Showing elements 1 - 20 out of 47