Known vulnerabilities in Security QRadar EDR - page 2

Vendor: IBM Corporation
Software: Security QRadar EDR
Software CPE: cpe:2.3:a:ibm_corporation:security_qradar_edr:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 81
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Security QRadar EDR Security QRadar EDR is affected by 81 known vulnerabilities: 1 critical, 6 high, 50 medium, 24 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105921 - Security Features
CVE-2024-45644		 CWE-254 Low
No
No
 - 21.03.2025 SB2025032108
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 3.12.17 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 3.12.16 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 3.12.16 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 3.12.16 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 26 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 3.12.16 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 3.12.16 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 3.12.16 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 3.12.15 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 3.12.15 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 3.12.15 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 3.12.15 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 36 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 3.12.15 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 3.12.15 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 3.12.15 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 3.12.15 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 3.12.15 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 3.12.15 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 3.12.15 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 3.12.15 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more


Showing elements 21 - 40 out of 81