Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_network_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Network Security (636ab10f-c9ab-58d2-aeae-7bc3636c6e4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4160 vulnerable 2026-06-08 05:25:58.959838 Details available
MEDIUM (5.9)
IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174340.
Published: 2021-11-08T16:50:29.152Z
Updated: 2024-09-16T17:49:20.975Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4159 vulnerable 2026-06-08 05:25:58.959423 Details available
MEDIUM (5.3)
IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to mount further attacks against the system. IBM X-Force ID: 174339.
Published: 2022-07-12T17:35:20.309Z
Updated: 2024-09-16T20:47:21.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4157 vulnerable 2026-06-08 05:25:58.956916 Details available
MEDIUM (6.8)
IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174337.
Published: 2022-07-12T17:35:18.668Z
Updated: 2024-09-17T03:27:34.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4153 vulnerable 2026-06-08 05:25:58.956558 Details available
MEDIUM (5.4)
IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174269.
Published: 2021-11-08T16:50:27.630Z
Updated: 2024-09-16T17:03:07.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4152 vulnerable 2026-06-08 05:25:58.956136 Details available
MEDIUM (6.8)
IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communication channel that can be obtained using man in the middle techniques. IBM X-Force ID: 17467.
Published: 2021-11-08T16:50:26.091Z
Updated: 2024-09-16T23:10:44.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1491 vulnerable 2026-06-08 05:09:22.430963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1458 vulnerable 2026-06-08 05:09:22.215839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1457 vulnerable 2026-06-08 05:09:22.214584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.