Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2023-31346 DESCRIPTION: AMD SEV-SNP Firmware could allow a local authenticated...

CVE-2024-28786

creationtimestamp| type| source ---|---|--- 2025-01-27 23:43:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113902970781080807 2025-01-28 00:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr6gud6go2n 2025-01-28 01:08:22+00:00| seen|...

CVE-2024-28786 IBM QRadar SIEM information disclosure

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques...

CVE-2024-28786

CVE-2024-28786 affects IBM QRadar SIEM 7.5 where sensitive data is transmitted in cleartext in a communication channel, enabling potential disclosure via man-in-the-middle. The CVSS v3.1 base score is 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Remediation in the provided data: upgrade QRadar SIEM...