IBM QRadar Security Information and Event Manager 7.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:-:*:*:*:*:*:*
part: a version: 7.3.1 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-4888 |
vulnerable | 2026-06-08 05:26:41.141243 |
Details available
MEDIUM (6.3)
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
Published: 2021-01-28T12:55:15.998Z
Updated: 2024-09-17T03:32:59.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4789 |
vulnerable | 2026-06-08 05:26:40.961625 |
Details available
MEDIUM (6.5)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
Published: 2021-01-27T16:35:33.500Z
Updated: 2024-09-16T18:43:31.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4787 |
vulnerable | 2026-06-08 05:26:40.942062 |
Details available
MEDIUM (4.2)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.
Published: 2021-01-27T16:35:32.845Z
Updated: 2024-09-16T18:29:15.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4786 |
vulnerable | 2026-06-08 05:26:40.919528 |
Details available
MEDIUM (5.4)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.
Published: 2021-01-27T16:35:32.209Z
Updated: 2024-09-16T23:00:30.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1418 |
vulnerable | 2026-06-08 05:11:18.106916 |
Details available
IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM X-Force ID: 138824.
Published: 2018-04-26T14:00:00.000Z
Updated: 2024-09-17T01:17:01.131Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1695 |
vulnerable | 2026-06-08 05:09:22.857510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.