Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:soar_qradar_plugin_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSoar Qradar Plugin App (6f620acc-91e9-5997-9b79-0502b25b1aeb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36114 vulnerable 2026-06-08 07:21:01.017004 IBM QRadar SOAR Plugin App path traversal
MEDIUM (6.5)
IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2025-08-20T14:37:38.331Z
Updated: 2025-08-20T14:56:15.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38263 vulnerable 2026-06-08 06:08:17.499201 IBM SOAR QRadar Plugin App improper access controls
MEDIUM (6.5)
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577.
Published: 2024-02-02T03:33:13.151Z
Updated: 2024-08-02T17:39:12.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38020 vulnerable 2026-06-08 06:08:16.713493 IBM SOAR QRadar Plugin App log injection
MEDIUM (4.3)
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate output written to log files. IBM X-Force ID: 260576.
Published: 2024-02-02T03:36:26.147Z
Updated: 2024-08-02T17:23:27.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38019 vulnerable 2026-06-08 06:08:16.713045 IBM SOAR QRadar Plugin App directory traversal
HIGH (8.1)
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 260575.
Published: 2024-02-02T03:34:56.977Z
Updated: 2024-08-02T17:23:27.824Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.