DeutschShown in its original language — a full translation is planned for a future version.
IBM QRadar SIEM: Mehrere Schwachstellen
view advisory published 2021-11-30
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.
01
describes (105)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3715US | high7.8 | — | ||
A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading t… | ||||
| CVE-2021-29863US | medium4.3 | — | ||
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially… | ||||
| CVE-2021-29849US | medium6.1 | — | ||
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct… | ||||
| CVE-2021-29779US | medium5.9 | — | ||
IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communicat… | ||||
| CVE-2021-20400US | high7.5 | — | ||
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074. | ||||
| CVE-2021-32028US | medium6.5 | — | ||
A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of serve… | ||||
| CVE-2021-3541US | medium6.5 | — | ||
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service. | ||||
| CVE-2021-22555US | high7.8OT critical | KEV | ||
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory… | ||||
| CVE-2021-33503US | high7.5 | — | ||
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catast… | ||||
| CVE-2021-30468US | high7.5 | — | ||
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinit… | ||||
| CVE-2021-31812US | medium5.5 | — | ||
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions. | ||||
| CVE-2021-31811US | medium5.5 | — | ||
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions… | ||||
| CVE-2020-24489US | high8.8 | — | ||
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2020-24513US | medium6.5OT elevated | — | ||
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2020-24512US | low3.3OT elevated | — | ||
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2020-24511US | medium6.5OT elevated | — | ||
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2021-28169US | medium5.3 | — | ||
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB… | ||||
| CVE-2021-3520US | critical9.8 | — | ||
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a neg… | ||||
| CVE-2021-3516US | high7.8 | — | ||
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The great… | ||||
| CVE-2021-32027US | high8.8 | — | ||
A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks l… | ||||
showing 20 of 105
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-0227 - CSAF Versionself
- WID-SEC-2025-0227 - Portal Versionself
- IBM Security Bulletin: 6520472 vom 2021-11-30external
- IBM Security Bulletin: 6520474 vom 2021-11-30external
- IBM Security Bulletin: 6520476 vom 2021-11-30external
- IBM Security Bulletin: 6520478 vom 2021-11-30external
- IBM Security Bulletin: 6520480 vom 2021-11-30external
- IBM Security Bulletin: 6520482 vom 2021-11-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan