Medium 1 exploited CVE WID-SEC-2024-1872 10 CVEs

IBM QRadar SIEM: Mehrere Schwachstellen

Published Jul 25, 2021 · Updated Aug 15, 2024 · Revision 2 · de-DE

Vendor: IBM Product: QRadar SIEM Platform: Linux

Summary

Ein entfernter anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, einen Denial-of-Service-Zustand auszulösen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.

Vulnerabilities 10

Medium 6.9

CVE-2020-11023 Exploited Public exploit EPSS 85%

Potential XSS vulnerability in jQuery

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems

Apr 29, 2020
KEV Jan 23, 2025
High 8.2

CVE-2020-11987 EPSS 14%

Server-side request forgery (SSRF) in Apache Batik

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GE…

batik batik org.apache.xmlgraphics:batik-svgbrowser Debian Ubuntu Maven

Feb 24, 2021
Medium 6.9

CVE-2020-11022 Public exploit EPSS 99%

jQuery has a potential XSS vulnerability

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…

jquery jQuery keycloak-26.6-iamguarded-compat drupal7 Debian Ubuntu Alpine Wolfi npm Packagist Maven NuGet RubyGems

Apr 29, 2020
Medium 6.1

CVE-2015-9251 Public exploit EPSS 30%

Cross-Site Scripting (XSS) in jquery

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

ruby ceph jquery-rails jQuery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2019-11358 Public exploit EPSS 87%

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems

Apr 19, 2019
Medium 6.1

CVE-2020-13954 EPSS 41%

Apache CXF Reflected XSS in the services listing page via the styleSheetPath

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject ja…

Apache Software Foundation Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven

Nov 12, 2020
Medium 5.9

CVE-2021-20337

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that co…

IBM QRadar SIEM

Jul 26, 2021
Medium 5.5

CVE-2021-28657

Infinite loop in Apache Tika's MP3 parser

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven

Mar 31, 2021
Medium 5.3

CVE-2020-13956

Cross-site scripting in Apache HttpClient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Wolfi Maven

Dec 2, 2020
Low 3.3

CVE-2020-8908

Temp directory permission issue in Guava

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on un…

Google Guava druid celeborn-0.6 Debian Ubuntu Azure Linux Wolfi Maven

Dec 10, 2020

Revision history

2024-08-15 #2
Neue Updates von IBM aufgenommen
2021-07-25 #1
Initiale Fassung

References

IBM Security Bulletin vom 2021-07-25
https://www.ibm.com/support/pages/node/6474847
IBM Security Bulletin vom 2021-07-25
https://www.ibm.com/support/pages/node/6474843
IBM Security Bulletin 7165686 vom 2024-08-16
https://www.ibm.com/support/pages/node/7165686