IBM Qradar Security Information And Event Manager 7.4.0 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:p1:*:*:*:*:*:*
part: a version: 7.4.0 update: p1
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5032 |
vulnerable | 2026-06-08 05:26:41.411767 |
Details available
LOW (3.1)
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.
Published: 2021-02-04T16:55:40.336Z
Updated: 2024-09-16T20:37:02.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4888 |
vulnerable | 2026-06-08 05:26:41.142011 |
Details available
MEDIUM (6.3)
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
Published: 2021-01-28T12:55:15.998Z
Updated: 2024-09-17T03:32:59.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4789 |
vulnerable | 2026-06-08 05:26:40.962924 |
Details available
MEDIUM (6.5)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
Published: 2021-01-27T16:35:33.500Z
Updated: 2024-09-16T18:43:31.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4787 |
vulnerable | 2026-06-08 05:26:40.943340 |
Details available
MEDIUM (4.2)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.
Published: 2021-01-27T16:35:32.845Z
Updated: 2024-09-16T18:29:15.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4786 |
vulnerable | 2026-06-08 05:26:40.934495 |
Details available
MEDIUM (5.4)
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.
Published: 2021-01-27T16:35:32.209Z
Updated: 2024-09-16T23:00:30.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4513 |
vulnerable | 2026-06-08 05:25:59.435329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4512 |
vulnerable | 2026-06-08 05:25:59.434743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4511 |
vulnerable | 2026-06-08 05:25:59.434236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4510 |
vulnerable | 2026-06-08 05:25:59.433667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4364 |
vulnerable | 2026-06-08 05:25:59.234290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.