Show filters
400 Total Results
Displaying 21-30 of 400
Sort by:
Attacker Value
Unknown
CVE-2023-33859
Disclosure Date: July 10, 2024 (last updated August 01, 2024)
IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM X-Force ID: 257697.
0
Attacker Value
Unknown
CVE-2024-25023
Disclosure Date: July 10, 2024 (last updated September 21, 2024)
IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281429.
0
Attacker Value
Unknown
CVE-2022-38383
Disclosure Date: June 28, 2024 (last updated August 02, 2024)
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.
0
Attacker Value
Unknown
CVE-2023-47726
Disclosure Date: June 18, 2024 (last updated June 19, 2024)
IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation. IBM X-Force ID: 272087.
0
Attacker Value
Unknown
CVE-2024-27269
Disclosure Date: May 14, 2024 (last updated May 15, 2024)
IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants. IBM X-Force ID: 284575.
0
Attacker Value
Unknown
CVE-2023-47727
Disclosure Date: May 02, 2024 (last updated May 03, 2024)
IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089.
0
Attacker Value
Unknown
CVE-2022-38386
Disclosure Date: May 01, 2024 (last updated May 02, 2024)
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.
0
Attacker Value
Unknown
CVE-2023-47731
Disclosure Date: April 23, 2024 (last updated April 24, 2024)
IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203.
0
Attacker Value
Unknown
CVE-2023-50949
Disclosure Date: April 11, 2024 (last updated April 12, 2024)
IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.
0
Attacker Value
Unknown
CVE-2024-28782
Disclosure Date: April 03, 2024 (last updated April 04, 2024)
IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.
0
