Vulnerabilities > IBM > Qradar Security Information AND Event Manager > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-05-11 | CVE-2022-22320 | Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager 7.3.3/7.4.3 IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. | 3.5 |
2022-04-27 | CVE-2022-22345 | Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. | 3.5 |
2021-07-16 | CVE-2020-4980 | Cleartext Transmission of Sensitive Information vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. | 3.3 |
2021-05-05 | CVE-2020-4929 | Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. | 3.5 |
2021-02-04 | CVE-2020-5032 | Unspecified vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. low complexity ibm | 3.3 |
2021-01-27 | CVE-2020-4787 | Server-Side Request Forgery (SSRF) vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). | 2.1 |
2020-11-05 | CVE-2018-1725 | Unspecified vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. | 2.1 |
2020-07-14 | CVE-2020-4364 | Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. | 3.5 |
2020-04-15 | CVE-2020-4268 | Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. | 3.5 |
2020-01-10 | CVE-2019-4508 | Insufficiently Protected Credentials vulnerability in IBM Qradar Security Information and Event Manager IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. | 2.1 |