Lucene search

Security Bulletin: IBM QRadar SIEM is affected by a remote code execution in Spring Framework (CVE-2022-22963, CVE-2022-22965, CVE-2022-22950)

🗓️ 24 Jun 2022 17:09:34Reported by IBMType

ibm🔗 www.ibm.com👁 196 Views

IBM QRadar SIEM affected by Spring Framework remote code execution (CVE-2022-22963, CVE-2022-22965, CVE-2022-22950). Update to 7.3.3 FP11 IF01, 7.4.3 FP6, 7.5.0 UP

Reporter	Title	Published	Views	Family All 199
F5 Networks	K11510688 : Spring Framework (Spring4Shell) and Spring Cloud vulnerabilities CVE-2022-22965, CVE-2022-22950, and CVE-2022-22963	31 Mar 202200:00	–	f5
CERT	Spring Framework insecurely handles PropertyDescriptor objects with data binding	31 Mar 202200:00	–	cert
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data is affected by a remote code execution in Spring Framework (CVE-2022-22965)	27 Apr 202214:54	–	ibm
IBM Security Bulletins	Security Bulletin: CMIS is affected since it uses Spring Framework, but not vulnerable to [CVE-2022-22965] and [CVE-2022-22963]	18 Oct 202215:36	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Spring Framework, IBM Db2 Web Query for i is vulnerable to unprotected fields (CVE-2022-22968), remote code execution (CVE-2022-22965), and denial of service (CVE-2022-22950).	10 Jun 202205:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability exists for Spring Framework in Watson Explorer (CVE-2021-22060, CVE-2022-22965, CVE-2022-22950)	22 Apr 202211:43	–	ibm
IBM Security Bulletins	Security Bulletin: A VMWare Tanzu Spring Vulerability Affects IBM OpenPages with Watson (CVE-2022-22950)	28 Jul 202316:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation with Spring Framework (CVE-2022-22950).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22950, XFID:217968)	13 May 202217:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected but not classified as vulnerable to a denial of service in Spring Framework (CVE-2022-22950)	6 May 202223:17	–	ibm

Vulners

Node

ibm ibm_qradar_siemMatch7.3

ibm ibm_qradar_siemMatch7.4

ibm ibm_qradar_siemMatch7.5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2022 17:34Current

1.1Low risk

Vulners AI Score1.1

CVSS39.8

EPSS0.975