IBM Qradar Advisor
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-38896 | 2.5 ; 2.6.1 | IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co | MEDIUM 6.1 | 0.7 % | ||
| CVE-2021-20380 | 1.1 ; 2.5 | IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information | HIGH 7.5 | 1.4 % | ||
| CVE-2020-4408 | 1.1 ; 2.5.2 | The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which coul | MEDIUM 4.6 | 0.3 % | ||
| CVE-2019-4672 | 1.1 ; 2.5 | IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests | MEDIUM 5.3 | 1.4 % | ||
| CVE-2019-4557 | 1.1 ; 2.5 | IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi | HIGH 7.5 | 0.8 % | ||
| CVE-2019-4556 | 1.0.0 ; 2.4.0 | IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application contro | MEDIUM 6.5 | 0.8 % |