Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:*

part: a version: 3.12 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Qradar Edr (663d94d1-2045-53e7-89ef-5e9b136e9675)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45636 vulnerable 2026-07-28 22:53:19.228252 IBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.
MEDIUM (4.1)
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.
Published: 2026-06-11T15:10:38.269Z
Updated: 2026-06-11T15:41:51.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36379 vulnerable 2026-06-08 07:21:01.674836 IBM Security QRadar EDR Software has multiple vulnerabilities
MEDIUM (5.9)
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2026-02-17T20:30:29.415Z
Updated: 2026-02-18T14:49:16.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36377 vulnerable 2026-06-08 07:21:01.672532 IBM Security QRadar EDR Software has multiple vulnerabilities
MEDIUM (6.3)
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Published: 2026-02-17T20:32:01.299Z
Updated: 2026-02-18T14:48:58.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36376 vulnerable 2026-06-08 07:21:01.670791 IBM Security QRadar EDR Software has multiple vulnerabilities
MEDIUM (6.3)
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Published: 2026-02-17T20:37:28.659Z
Updated: 2026-02-18T14:47:00.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45654 vulnerable 2026-06-08 06:48:08.784577 IBM Security ReaQta improper input validation
MEDIUM (4.3)
IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted inputs.
Published: 2025-01-19T02:19:11.978Z
Updated: 2025-01-27T21:06:49.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45644 vulnerable 2026-06-08 06:48:08.759789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45643 vulnerable 2026-06-08 06:48:08.759367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45642 vulnerable 2026-06-08 06:48:08.759056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45641 vulnerable 2026-06-08 06:48:08.758606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45640 vulnerable 2026-06-08 06:48:08.758175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45638 vulnerable 2026-06-08 06:48:08.756063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45100 vulnerable 2026-06-08 06:45:54.593812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45099 vulnerable 2026-06-08 06:45:54.592278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35006 vulnerable 2026-06-08 06:06:26.367138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33861 vulnerable 2026-06-08 06:06:23.626628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33860 vulnerable 2026-06-08 06:06:23.626339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33859 vulnerable 2026-06-08 06:06:23.625884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.