| CVE-2023-40367 |
IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Oct 14, 2023 |
| CVE-2022-43863 |
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to…
|
6.7
Medium
|
Mar 22, 2023 |
| CVE-2022-34351 |
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain…
|
5.9
Medium
|
Feb 17, 2023 |
| CVE-2022-30613 |
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user
|
4.4
Medium
|
Oct 7, 2022 |
| CVE-2022-22480 |
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could…
|
5.3
Medium
|
Oct 7, 2022 |
| CVE-2021-39088 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other…
|
7.4
High
|
Jul 28, 2022 |
| CVE-2022-22424 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due…
|
5.1
Medium
|
Jul 20, 2022 |
| CVE-2021-38936 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user
|
4.9
Medium
|
Jul 20, 2022 |
| CVE-2021-29755 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications
|
5.9
Medium
|
Jul 20, 2022 |
| CVE-2021-39041 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not…
|
3.7
Low
|
Jul 12, 2022 |
| CVE-2022-22320 |
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting
|
4.8
Medium
|
May 11, 2022 |
| CVE-2022-22345 |
IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting
|
4.8
Medium
|
Apr 27, 2022 |
| CVE-2021-38939 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user…
|
3.7
Low
|
Apr 27, 2022 |
| CVE-2021-38919 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users
|
5.9
Medium
|
Apr 27, 2022 |
| CVE-2021-38878 |
IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity…
|
5.9
Medium
|
Apr 27, 2022 |
| CVE-2021-38874 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some…
|
4.3
Medium
|
Apr 27, 2022 |
| CVE-2021-38869 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle…
|
4.3
Medium
|
Apr 27, 2022 |
| CVE-2021-29776 |
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another…
|
3.1
Low
|
Apr 27, 2022 |
| CVE-2021-29863 |
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF)
|
5.4
Medium
|
Dec 1, 2021 |
| CVE-2021-29849 |
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 1, 2021 |
| CVE-2021-29779 |
IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key…
|
5.9
Medium
|
Dec 1, 2021 |
| CVE-2021-20400 |
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Medium
|
Dec 1, 2021 |
| CVE-2021-29750 |
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Medium
|
Sep 15, 2021 |
| CVE-2021-29880 |
IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information…
|
5.3
Medium
|
Aug 13, 2021 |
| CVE-2021-20399 |
IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE)…
|
7.1
High
|
Jul 27, 2021 |