Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:interim_fix_02:*:*:*:*:*:*

part: a version: 7.3.2 update: interim_fix_02

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4888 vulnerable 2026-06-08 05:26:41.141455 Details available
MEDIUM (6.3)
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
Published: 2021-01-28T12:55:15.998Z
Updated: 2024-09-17T03:32:59.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4789 vulnerable 2026-06-08 05:26:40.962202 Details available
MEDIUM (6.5)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
Published: 2021-01-27T16:35:33.500Z
Updated: 2024-09-16T18:43:31.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4787 vulnerable 2026-06-08 05:26:40.942503 Details available
MEDIUM (4.2)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.
Published: 2021-01-27T16:35:32.845Z
Updated: 2024-09-16T18:29:15.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4786 vulnerable 2026-06-08 05:26:40.925712 Details available
MEDIUM (5.4)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.
Published: 2021-01-27T16:35:32.209Z
Updated: 2024-09-16T23:00:30.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.