Vulnerabilities

TI-2023-16733 CVE-2023-33860 · GHSA-p4c4-ff2v-qph3

IBM Security ReaQta information disclosure

LOW 24

IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2024-07-10 No fix listed CWE-614

TI-2023-16732 CVE-2023-33859 · GHSA-8qh8-5vx6-pv8r

LOW 30

IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00361 Published 2024-07-10 No fix listed CWE-204

TI-2023-17493 CVE-2023-35006 · GHSA-f8f7-g44v-jxm9

LOW 24

IBM Security QRadar EDR 3.12 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00306 Published 2024-07-10 No fix listed CWE-80