CVE-2024-45640

CVE-2024-45640 – IBM Security ReaQta 3.12 : The IBM QRadar/ReaQta product exposes sensitive information via HTTP responses, due to improper authentication. Documented impact: information disclosure that could enable follow-on attacks. The issue is associated with IBM Security ReaQta 3.12; the Red...

CVE-2023-33860

CVE-2023-33860 affects IBM Security QRadar EDR version 3.12. The vulnerability arises because authorization tokens or session cookies are not marked with the Secure attribute, enabling cookies to be sent over HTTP. Attack scenario described in the sources includes sending a link via HTTP or embed...

CVE-2024-45638

CVE-2024-45638 impacts IBM Security QRadar EDR 3.12. The root cause is plaintext storage of user credentials, enabling read access by a local privileged user and leading to information disclosure of sensitive data. Reported by IBM QRadar notes, the impact is limited to confidentiality (C:H) with ...

CVE-2023-35006

IBM Security QRadar EDR 3.12 is vulnerable to HTML injection due to insufficient input filtering/escaping in user-supplied data, enabling remote HTML execution in the browser within the hosting site's context. Affected product: IBM Security QRadar EDR 3.12. Root cause: lack of input validation/es...

CVE-2024-45100

CVE-2024-45100 affects IBM Security QRadar EDR (ReaQta) 3.12. The vulnerability arises from improper allocation of resources, enabling a privileged user to cause a denial of service by sending multiple administration requests. IBM’s security bulletin documents this CVE alongside CVE-2024-45640 an...

CVE-2024-45654

IBM Security ReaQta 3.12 is affected by CVE-2024-45654 due to reliance on untrusted inputs, enabling an authenticated user to perform unauthorized actions. The IBM advisory for QRadar EDR (version 3.12) documents the root cause as input validation relying on untrusted inputs and lists the affecte...

CVE-2024-45644

CVE-2024-45644 affects IBM Security ReaQta 3.12 (and IBM QRadar EDR context in IBM bulletin). The issue stems from insufficient validation of uploaded files, enabling a privileged user to upload or transfer files of dangerous types that can be automatically processed within the product environmen...

CVE-2023-33861

CVE-2023-33861 affects IBM Security QRadar EDR 3.12. The vulnerability allows an attacker to spoof a trusted entity by interfering with the communication path between the host and client, related to trust management/improper certificate handling. The Red Hat/IBM security entries and the IBM bulle...

CVE-2024-45641

IBM Security ReaQta EDR 3.12 contains a vulnerability due to improper SSL certificate validation that could allow an attacker to perform unauthorized actions. Affected component is the revalidation/handling of SSL certificates within the product; exploitation is network-based (no user interaction...

CVE-2023-33859

CVE-2023-33859 affects IBM Security QRadar EDR 3.12. The vulnerability is an information-disclosure issue caused by an observable login response discrepancy, allowing sensitive data exposure. This is documented across multiple sources (IBM bulletin and CVE records) with a base score around 5.3 (m...

CVE-2024-45642

CVE-2024-45642 affects IBM Security ReaQta 3.12. The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that could allow a privileged user to embed arbitrary JavaScript code, potentially leading to credentials disclosure within a trusted session. The issue is documented in IBM’s Sec...

CVE-2024-45099

CVE-2024-45099 affects IBM Security ReaQta 3.12. The issue is a cross-site scripting vulnerability in the Web UI that allows a privileged user to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s Security Bulletin for QRadar EDR confirms th...

CVE-2024-45643

CVE-2024-45643 affects IBM Security QRadar EDR 3.12. The issue is caused by the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt sensitive credential information. Public references in the IBM Security bulletin indicate remediation via an update to QRa...

CVE-2024-45636

The CVE-2024-45636 entry concerns IBM Security QRadar EDR. Affected: QRadar EDR 3.12–3.12.24. Issue: credentials are stored in plaintext, readable by a local privileged user (CWE-256). Impact: potential exposure of sensitive credentials on the host; CVSS v3.1 base score 4.1 (L, H, N) with Local a...

CVE-2025-36376

IBM Security QRadar EDR (QRadar EDR) versions 3.12–3.12.23 do not invalidate sessions after expiration, allowing an authenticated user to impersonate another user. This is documented across multiple sources (IBM RH/CVE page, NVD entry, attackerKB, and CVE record). The issue is addressed by upgrad...