Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:-:*:*:*:*:*:*

part: a version: 7.4.0 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22875 vulnerable 2026-06-08 05:54:27.286314 IBM Security QRadar SIEM information disclosure
HIGH (8.4)
IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356.
Published: 2023-01-17T18:22:21.437Z
Updated: 2025-04-04T18:09:32.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39041 vulnerable 2026-06-08 05:33:48.807724 Details available
LOW (3.7)
IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM X-Force ID: 214028.
Published: 2022-07-12T17:35:21.756Z
Updated: 2024-09-17T04:14:12.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29750 vulnerable 2026-06-08 05:31:26.919435 Details available
MEDIUM (5.9)
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.
Published: 2021-09-15T17:55:17.236Z
Updated: 2024-09-16T18:34:16.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5032 vulnerable 2026-06-08 05:26:41.411653 Details available
LOW (3.1)
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.
Published: 2021-02-04T16:55:40.336Z
Updated: 2024-09-16T20:37:02.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4888 vulnerable 2026-06-08 05:26:41.141995 Details available
MEDIUM (6.3)
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
Published: 2021-01-28T12:55:15.998Z
Updated: 2024-09-17T03:32:59.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4789 vulnerable 2026-06-08 05:26:40.962903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4787 vulnerable 2026-06-08 05:26:40.943240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4786 vulnerable 2026-06-08 05:26:40.933822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4513 vulnerable 2026-06-08 05:25:59.435313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4512 vulnerable 2026-06-08 05:25:59.434727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4511 vulnerable 2026-06-08 05:25:59.434220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4510 vulnerable 2026-06-08 05:25:59.433549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4364 vulnerable 2026-06-08 05:25:59.233598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1725 vulnerable 2026-06-08 05:11:18.658062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.