Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-52626 (GCVE-0-2023-52626)
Vulnerability from cvelistv5 – Published: 2024-03-26 17:49 – Updated: 2026-05-23 15:26
VLAI
EPSS
VEX
Title
net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
Summary
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
Indirection (*) is of lower precedence than postfix increment (++). Logic
in napi_poll context would cause an out-of-bound read by first increment
the pointer address by byte address space and then dereference the value.
Rather, the intended logic was to dereference first and then increment the
underlying value.
Severity
No CVSS data available.
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 15:54 UTC
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
e5d30f7da35720060299483e65fc372980a82dfb , < 40e0d0746390c5b0c31144f4f1688d72f3f8d790
(git)
Affected: 92214be5979c0961a471b7eaaaeacab41bdf456c , < 33cdeae8c6fb58cc445f859b67c014dc9f60b4e0 (git) Affected: 92214be5979c0961a471b7eaaaeacab41bdf456c , < 3876638b2c7ebb2c9d181de1191db0de8cac143a (git) Affected: 42b11d1293e5a0f932c0b6e891b2c7bae57b839d (git) Affected: 6.6.3 , < 6.6.15 (semver) Affected: 6.5.13 , < 6.6 (semver) |
guessed | |
| Linux | Linux |
Affected:
6.7
Unaffected: 0 , < 6.7 (semver) Unaffected: 6.6.15 , ≤ 6.6.* (semver) Unaffected: 6.7.3 , ≤ 6.7.* (semver) Unaffected: 6.8 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T23:03:21.274Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-52626",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-10T15:54:09.330337Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-11T17:33:43.784Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "40e0d0746390c5b0c31144f4f1688d72f3f8d790",
"status": "affected",
"version": "e5d30f7da35720060299483e65fc372980a82dfb",
"versionType": "git"
},
{
"lessThan": "33cdeae8c6fb58cc445f859b67c014dc9f60b4e0",
"status": "affected",
"version": "92214be5979c0961a471b7eaaaeacab41bdf456c",
"versionType": "git"
},
{
"lessThan": "3876638b2c7ebb2c9d181de1191db0de8cac143a",
"status": "affected",
"version": "92214be5979c0961a471b7eaaaeacab41bdf456c",
"versionType": "git"
},
{
"status": "affected",
"version": "42b11d1293e5a0f932c0b6e891b2c7bae57b839d",
"versionType": "git"
},
{
"lessThan": "6.6.15",
"status": "affected",
"version": "6.6.3",
"versionType": "semver"
},
{
"lessThan": "6.6",
"status": "affected",
"version": "6.5.13",
"versionType": "semver"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "6.7"
},
{
"lessThan": "6.7",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.15",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"version": "6.7.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.8",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.15",
"versionStartIncluding": "6.6.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.7.3",
"versionStartIncluding": "6.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.8",
"versionStartIncluding": "6.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.5.13",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix operation precedence bug in port timestamping napi_poll context\n\nIndirection (*) is of lower precedence than postfix increment (++). Logic\nin napi_poll context would cause an out-of-bound read by first increment\nthe pointer address by byte address space and then dereference the value.\nRather, the intended logic was to dereference first and then increment the\nunderlying value."
}
],
"providerMetadata": {
"dateUpdated": "2026-05-23T15:26:34.083Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790"
},
{
"url": "https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0"
},
{
"url": "https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a"
}
],
"title": "net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2023-52626",
"datePublished": "2024-03-26T17:49:59.220Z",
"dateReserved": "2024-03-06T09:52:12.090Z",
"dateUpdated": "2026-05-23T15:26:34.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-52626",
"date": "2026-09-11",
"epss": "0.00237",
"percentile": "0.14666"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-52626\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-03-26T18:15:09.087\",\"lastModified\":\"2026-06-17T06:43:11.940\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet/mlx5e: Fix operation precedence bug in port timestamping napi_poll context\\n\\nIndirection (*) is of lower precedence than postfix increment (++). Logic\\nin napi_poll context would cause an out-of-bound read by first increment\\nthe pointer address by byte address space and then dereference the value.\\nRather, the intended logic was to dereference first and then increment the\\nunderlying value.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net/mlx5e: se corrigi\u00f3 el error de precedencia de operaci\u00f3n en la marca de tiempo del puerto contexto napi_poll La indirecci\u00f3n (*) tiene menor prioridad que el incremento de postfijo (++). La l\u00f3gica en el contexto napi_poll provocar\u00eda una lectura fuera de los l\u00edmites al incrementar primero la direcci\u00f3n del puntero por espacio de direcciones de bytes y luego desreferenciar el valor. M\u00e1s bien, la l\u00f3gica prevista era desreferenciar primero y luego incrementar el valor subyacente.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e5d30f7da35720060299483e65fc372980a82dfb\",\"lessThan\":\"40e0d0746390c5b0c31144f4f1688d72f3f8d790\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"92214be5979c0961a471b7eaaaeacab41bdf456c\",\"lessThan\":\"33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"92214be5979c0961a471b7eaaaeacab41bdf456c\",\"lessThan\":\"3876638b2c7ebb2c9d181de1191db0de8cac143a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"42b11d1293e5a0f932c0b6e891b2c7bae57b839d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"lessThan\":\"6.6.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.5.13\",\"lessThan\":\"6.6\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.7\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.7\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.15\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.3\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T15:54:09.330337Z\",\"id\":\"CVE-2023-52626\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.3\",\"versionEndExcluding\":\"6.6.15\",\"matchCriteriaId\":\"3EF31C50-F7D0-4813-8646-D31DAD69EAB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.7.3\",\"matchCriteriaId\":\"58FD5308-148A-40D3-B36A-0CA6B434A8BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9F4EA73-0894-400F-A490-3A397AB7A517\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-28T06:49:08+00:00",
"cve": "CVE-2023-52626",
"id": "CVE-2023-52626",
"initial_release_date": "2023-01-01T00:00:00+00:00",
"product_status:fixed": "429",
"product_status:known_affected": "22",
"product_status:known_not_affected": "50",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52626.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:03:21.274Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52626\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:54:09.330337Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:18.376Z\"}}], \"cna\": {\"title\": \"net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"e5d30f7da35720060299483e65fc372980a82dfb\", \"lessThan\": \"40e0d0746390c5b0c31144f4f1688d72f3f8d790\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"92214be5979c0961a471b7eaaaeacab41bdf456c\", \"lessThan\": \"33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"92214be5979c0961a471b7eaaaeacab41bdf456c\", \"lessThan\": \"3876638b2c7ebb2c9d181de1191db0de8cac143a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"42b11d1293e5a0f932c0b6e891b2c7bae57b839d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6.6.3\", \"lessThan\": \"6.6.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.5.13\", \"lessThan\": \"6.6\", \"versionType\": \"semver\"}], \"programFiles\": [\"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.7\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.7\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.15\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790\"}, {\"url\": \"https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0\"}, {\"url\": \"https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet/mlx5e: Fix operation precedence bug in port timestamping napi_poll context\\n\\nIndirection (*) is of lower precedence than postfix increment (++). Logic\\nin napi_poll context would cause an out-of-bound read by first increment\\nthe pointer address by byte address space and then dereference the value.\\nRather, the intended logic was to dereference first and then increment the\\nunderlying value.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.15\", \"versionStartIncluding\": \"6.6.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.3\", \"versionStartIncluding\": \"6.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8\", \"versionStartIncluding\": \"6.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.5.13\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:26:34.083Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-52626\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:26:34.083Z\", \"dateReserved\": \"2024-03-06T09:52:12.090Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-03-26T17:49:59.220Z\", \"assignerShortName\": \"Linux\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
WID-SEC-W-2024-1905
Vulnerability from csaf_certbund - Published: 2024-08-21 22:00 - Updated: 2025-06-03 22:00Summary
IBM QRadar SIEM: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.
Angriff: Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, eine Man-in-the-Middle-Situation zu schaffen, Sicherheitsmaßnahmen zu umgehen oder eine Denial-of-Service-Situation zu schaffen.
Betroffene Betriebssysteme: - Linux
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Business Automation Workflow 24.0.0
IBM / Business Automation Workflow
|
cpe:/a:ibm:business_automation_workflow:24.0.0
|
24.0.0 | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM QRadar SIEM <7.5.0 UP9 IF02
IBM / QRadar SIEM
|
<7.5.0 UP9 IF02 |
References
7 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, Daten zu manipulieren, vertrauliche Informationen offenzulegen, eine Man-in-the-Middle-Situation zu schaffen, Sicherheitsma\u00dfnahmen zu umgehen oder eine Denial-of-Service-Situation zu schaffen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1905 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1905.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1905 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1905"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7166204 vom 2024-08-21",
"url": "https://www.ibm.com/support/pages/node/7166204"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12606 vom 2024-09-03",
"url": "https://linux.oracle.com/errata/ELSA-2024-12606.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2024-0011 vom 2024-09-04",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2024-September/001099.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7167662 vom 2024-09-05",
"url": "https://www.ibm.com/support/pages/node/7167662"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20163-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021187.html"
}
],
"source_lang": "en-US",
"title": "IBM QRadar SIEM: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-06-03T22:00:00.000+00:00",
"generator": {
"date": "2025-06-04T12:07:51.721+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2024-1905",
"initial_release_date": "2024-08-21T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-08-21T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-09-02T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-09-04T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von ORACLE aufgenommen"
},
{
"date": "2024-09-05T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-03T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "24.0.0",
"product": {
"name": "IBM Business Automation Workflow 24.0.0",
"product_id": "T036570",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:24.0.0"
}
}
}
],
"category": "product_name",
"name": "Business Automation Workflow"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.5.0 UP9 IF02",
"product": {
"name": "IBM QRadar SIEM \u003c7.5.0 UP9 IF02",
"product_id": "T037023"
}
},
{
"category": "product_version",
"name": "7.5.0 UP9 IF02",
"product": {
"name": "IBM QRadar SIEM 7.5.0 UP9 IF02",
"product_id": "T037023-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up9_if02"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-26555",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2020-26555"
},
{
"cve": "CVE-2021-46909",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-46909"
},
{
"cve": "CVE-2021-46972",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-46972"
},
{
"cve": "CVE-2021-47069",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47069"
},
{
"cve": "CVE-2021-47073",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47073"
},
{
"cve": "CVE-2021-47236",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47236"
},
{
"cve": "CVE-2021-47310",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47310"
},
{
"cve": "CVE-2021-47311",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47311"
},
{
"cve": "CVE-2021-47353",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47353"
},
{
"cve": "CVE-2021-47356",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47356"
},
{
"cve": "CVE-2021-47456",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47456"
},
{
"cve": "CVE-2021-47495",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2021-47495"
},
{
"cve": "CVE-2023-43788",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-43788"
},
{
"cve": "CVE-2023-43789",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-43789"
},
{
"cve": "CVE-2023-4692",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-4692"
},
{
"cve": "CVE-2023-4693",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-4693"
},
{
"cve": "CVE-2023-5090",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-5090"
},
{
"cve": "CVE-2023-52464",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52464"
},
{
"cve": "CVE-2023-52560",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52560"
},
{
"cve": "CVE-2023-52615",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52615"
},
{
"cve": "CVE-2023-52626",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52626"
},
{
"cve": "CVE-2023-52667",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52667"
},
{
"cve": "CVE-2023-52669",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52669"
},
{
"cve": "CVE-2023-52675",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52675"
},
{
"cve": "CVE-2023-52686",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52686"
},
{
"cve": "CVE-2023-52700",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52700"
},
{
"cve": "CVE-2023-52703",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52703"
},
{
"cve": "CVE-2023-52781",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52781"
},
{
"cve": "CVE-2023-52813",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52813"
},
{
"cve": "CVE-2023-52835",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52835"
},
{
"cve": "CVE-2023-52877",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52877"
},
{
"cve": "CVE-2023-52878",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52878"
},
{
"cve": "CVE-2023-52881",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-52881"
},
{
"cve": "CVE-2023-7008",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2023-7008"
},
{
"cve": "CVE-2024-1048",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-1048"
},
{
"cve": "CVE-2024-22365",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-22365"
},
{
"cve": "CVE-2024-26583",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26583"
},
{
"cve": "CVE-2024-26584",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26584"
},
{
"cve": "CVE-2024-26585",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26585"
},
{
"cve": "CVE-2024-26656",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26656"
},
{
"cve": "CVE-2024-26675",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26675"
},
{
"cve": "CVE-2024-26735",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26735"
},
{
"cve": "CVE-2024-26759",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26759"
},
{
"cve": "CVE-2024-26801",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26801"
},
{
"cve": "CVE-2024-26804",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26804"
},
{
"cve": "CVE-2024-26826",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26826"
},
{
"cve": "CVE-2024-26859",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26859"
},
{
"cve": "CVE-2024-26906",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26906"
},
{
"cve": "CVE-2024-26907",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26907"
},
{
"cve": "CVE-2024-26974",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26974"
},
{
"cve": "CVE-2024-26982",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-26982"
},
{
"cve": "CVE-2024-27397",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-27397"
},
{
"cve": "CVE-2024-27410",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-27410"
},
{
"cve": "CVE-2024-34750",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-34750"
},
{
"cve": "CVE-2024-35789",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35789"
},
{
"cve": "CVE-2024-35835",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35835"
},
{
"cve": "CVE-2024-35838",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35838"
},
{
"cve": "CVE-2024-35845",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35845"
},
{
"cve": "CVE-2024-35852",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35852"
},
{
"cve": "CVE-2024-35853",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35853"
},
{
"cve": "CVE-2024-35854",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35854"
},
{
"cve": "CVE-2024-35855",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35855"
},
{
"cve": "CVE-2024-35888",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35888"
},
{
"cve": "CVE-2024-35890",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35890"
},
{
"cve": "CVE-2024-35958",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35958"
},
{
"cve": "CVE-2024-35959",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35959"
},
{
"cve": "CVE-2024-35960",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-35960"
},
{
"cve": "CVE-2024-36004",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-36004"
},
{
"cve": "CVE-2024-36007",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-36007"
},
{
"cve": "CVE-2024-5564",
"product_status": {
"known_affected": [
"T036570",
"T002207",
"T004914",
"T037023"
]
},
"release_date": "2024-08-21T22:00:00.000+00:00",
"title": "CVE-2024-5564"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…