Security Bulletin: Moment js as used by IBM QRadar Advisor With Watson App is vulnerable to denial of service (CVE-2022-31129)

Summary Moment js as used by IBM QRadar Advisor With Watson App is vulnerable to denial of service. IBM has addressed the relevant vulnerabilities. Vulnerability Details CVEID:CVE-2022-31129 DESCRIPTION: Moment is vulnerable to a denial of service, caused by inefficient regular expression...

CVE-2021-20380

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

Information disclosure

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

CVE-2021-20380: Undefined Security Weakness

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

CVE-2018-1732: Exposure of Sensitive Information to an Unauthorized Actor

IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147810...

PT-2018-1997

Name of the Vulnerable Software and Affected Versions IBM QRadar Advisor with Watson version 1.14.0 Description The issue is related to insufficient data protection, which can lead to the disclosure of sensitive information to unauthorized users. This information can potentially be used to mount...