Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2023-19445 CVE-2023-38020 · GHSA-wx33-9hcf-h8wc

IBM SOAR QRadar Plugin App log injection

Priority LOW 20

IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate output written to log files.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00379 Published 2024-02-02 No fix listed CWE-117
Priority LOW 37

IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a remote attacker to traverse directories on the system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01019 Published 2024-02-02 No fix listed CWE-22
Priority LOW 39

IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00488 Published 2024-02-02 No fix listed CWE-284