IBM QRadar Security Information and Event Manager (SIEM) 7.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:-:*:*:*:*:*:*
part: a version: 7.4.2 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-20401 |
vulnerable | 2026-06-08 05:29:09.217346 |
Details available
MEDIUM (5.9)
IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.
Published: 2021-05-05T15:45:35.422Z
Updated: 2024-09-16T17:03:36.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20397 |
vulnerable | 2026-06-08 05:29:09.210021 |
Details available
MEDIUM (6.1)
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017.
Published: 2021-05-05T15:45:34.710Z
Updated: 2024-09-16T23:01:04.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5032 |
vulnerable | 2026-06-08 05:26:41.411864 |
Details available
LOW (3.1)
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.
Published: 2021-02-04T16:55:40.336Z
Updated: 2024-09-16T20:37:02.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5013 |
vulnerable | 2026-06-08 05:26:41.370423 |
Details available
HIGH (7.1)
IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.
Published: 2021-05-05T15:45:34.042Z
Updated: 2024-09-16T20:57:20.594Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4993 |
vulnerable | 2026-06-08 05:26:41.344086 |
Details available
MEDIUM (4.9)
IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905.
Published: 2021-05-05T15:45:33.324Z
Updated: 2024-09-16T20:42:48.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4979 |
vulnerable | 2026-06-08 05:26:41.308841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4932 |
vulnerable | 2026-06-08 05:26:41.204871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4929 |
vulnerable | 2026-06-08 05:26:41.198298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4888 |
vulnerable | 2026-06-08 05:26:41.142334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4883 |
vulnerable | 2026-06-08 05:26:41.135102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4789 |
vulnerable | 2026-06-08 05:26:40.963193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4787 |
vulnerable | 2026-06-08 05:26:40.943772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4786 |
vulnerable | 2026-06-08 05:26:40.936806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.