IBM QRadar Security Information and Event Manager (SIEM) 7.4.2 Fix Pack 1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:fix_pack_1:*:*:*:*:*:*
part: a version: 7.4.2 update: fix_pack_1
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-29779 |
vulnerable | 2026-06-08 05:31:27.010314 |
Details available
MEDIUM (5.9)
IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communications using man in the middle techniques. IBM X-Force ID: 203033.
Published: 2021-12-01T17:05:22.032Z
Updated: 2024-09-16T23:45:56.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20401 |
vulnerable | 2026-06-08 05:29:09.217363 |
Details available
MEDIUM (5.9)
IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.
Published: 2021-05-05T15:45:35.422Z
Updated: 2024-09-16T17:03:36.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20397 |
vulnerable | 2026-06-08 05:29:09.210563 |
Details available
MEDIUM (6.1)
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017.
Published: 2021-05-05T15:45:34.710Z
Updated: 2024-09-16T23:01:04.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5013 |
vulnerable | 2026-06-08 05:26:41.370441 |
Details available
HIGH (7.1)
IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.
Published: 2021-05-05T15:45:34.042Z
Updated: 2024-09-16T20:57:20.594Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4993 |
vulnerable | 2026-06-08 05:26:41.344208 |
Details available
MEDIUM (4.9)
IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905.
Published: 2021-05-05T15:45:33.324Z
Updated: 2024-09-16T20:42:48.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4979 |
vulnerable | 2026-06-08 05:26:41.308862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4932 |
vulnerable | 2026-06-08 05:26:41.204890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4929 |
vulnerable | 2026-06-08 05:26:41.198410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4883 |
vulnerable | 2026-06-08 05:26:41.135946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.