Security Bulletin: IBM QRadar SIEM is vulnerable to possible information disclosure [CVE-2023-22875]

Summary IBM QRadar SIEM copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. The key remains within the QRadar deployment. However, if you allow users other than QRadar system administrators to access manag...

CVE-2023-22875

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:36+00:00| seen| https://t.me/cibsecurity/56616 2025-04-04 18:36:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10528...

CVE-2023-22875

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356...

CVE-2023-22875

Summary (CVE-2023-22875): IBM QRadar SIEM 7.4 and 7.5 copies SSL/TLS certificate key files from the web UI to managed hosts that do not require the key, creating a possible information disclosure of the admin web server key. Root cause described as misdistribution of certificate keys within the d...

CVE-2020-22875

creationtimestamp| type| source ---|---|--- 2021-07-13 18:19:21+00:00| seen| https://t.me/cibsecurity/26114...

CVE-2020-22875

Integer overflow vulnerability in function JsiObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code...

CVE-2020-22875

Jsish CVE-2020-22875 is a vulnerability in the Jsi_ObjSetLength function where an integer overflow in that function allows remote code execution. Affected is jsish versions before 3.0.6 (NVD) and variants cited as vulnerable before 3.0.8 (CNVD). The root cause is improper boundary checks in Jsi_O...

CVE-2021-22875

Revive Adserver is affected by CVE-2021-22875: a reflected XSS in stats.php via the setPerPage parameter, impacting Revive Adserver versions up to 5.1.0 (fixed in 5.1.1). The root cause is insufficient input validation/neutralization of user-supplied data in the request parameters, allowing injec...

Revive Adserver 5.1.0 Cross Site Scripting

======================================================================== Revive Adserver Security Advisory REVIVE-SA-2021-002 ------------------------------------------------------------------------ https://www.revive-adserver.com/security/revive-sa-2021-002...