Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:soar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSoar (e7af3376-7c2b-53d8-ad3d-ce0aef9d38c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45670 vulnerable 2026-06-08 06:48:08.862701 IBM Security SOAR weak password recovery mechanism
MEDIUM (5.6)
IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.
Published: 2024-11-14T11:50:02.851Z
Updated: 2024-11-14T14:13:23.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38319 vulnerable 2026-06-08 06:41:45.025913 IBM Security SOAR code execution
HIGH (7.5)
IBM Security SOAR 51.0.2.0 could allow an authenticated user to execute malicious code loaded from a specially crafted script. IBM X-Force ID: 294830.
Published: 2024-06-22T18:56:34.854Z
Updated: 2024-08-02T04:04:25.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29785 vulnerable 2026-06-08 05:31:27.017758 Details available
MEDIUM (5.9)
IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 203169.
Published: 2022-01-20T19:40:12.352Z
Updated: 2024-09-17T04:14:56.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.