Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Network Threat Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION:...

EUVD-2024-54807

Malicious code in bioql PyPI...

The vulnerability of the software for analyzing network security threats in IBM Security QRadar Network Threat Analytics, related to resource management errors, allows attackers to trigger service failures.

The vulnerability of the software for analyzing network security threats in IBM Security QRadar Network Threat Analytics is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-38335 IBM Security QRadar Network Threat Analytics denial of service

IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources...

CVE-2024-38335 IBM Security QRadar Network Threat Analytics denial of service

IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources...

CVE-2024-38335

IBM Security QRadar Network Threat Analytics (QRadar NTA) versions 1.0.0–1.3.1 are affected by a denial-of-service flaw caused by improper allocation of resources. The CVE-2024-38335 issue can be exploited by a privileged user with adjacent access (no user interaction required) to exhaust resourc...

Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-1135 DESCRIPTION:...

CVE-2024-38335: Allocation of Resources Without Limits or Throttling

IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources...

Security Bulletin: IBM Security Network Threat Analytics for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2022-1941, CVE-2022-34749, CVE-2022-1552)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2022-1941 DESCRIPTION: protobuf is vulnerable to a denial of service, caused by a parsing...