Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:-:*:*:*:*:*:*

part: a version: 7.3.0 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39041 vulnerable 2026-06-08 05:33:48.807078 Details available
LOW (3.7)
IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM X-Force ID: 214028.
Published: 2022-07-12T17:35:21.756Z
Updated: 2024-09-17T04:14:12.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29750 vulnerable 2026-06-08 05:31:26.918515 Details available
MEDIUM (5.9)
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.
Published: 2021-09-15T17:55:17.236Z
Updated: 2024-09-16T18:34:16.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4888 vulnerable 2026-06-08 05:26:41.141220 Details available
MEDIUM (6.3)
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
Published: 2021-01-28T12:55:15.998Z
Updated: 2024-09-17T03:32:59.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4789 vulnerable 2026-06-08 05:26:40.961597 Details available
MEDIUM (6.5)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
Published: 2021-01-27T16:35:33.500Z
Updated: 2024-09-16T18:43:31.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4787 vulnerable 2026-06-08 05:26:40.938125 Details available
MEDIUM (4.2)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.
Published: 2021-01-27T16:35:32.845Z
Updated: 2024-09-16T18:29:15.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4786 vulnerable 2026-06-08 05:26:40.918282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.