Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Soar Qradar Plugin App
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38019 1 Ibm 1 Soar Qradar Plugin App 2024-02-09 N/A 6.5 MEDIUM
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 260575.
CVE-2023-38263 1 Ibm 1 Soar Qradar Plugin App 2024-02-09 N/A 8.8 HIGH
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577.
CVE-2023-38020 1 Ibm 1 Soar Qradar Plugin App 2024-02-09 N/A 4.3 MEDIUM
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate output written to log files. IBM X-Force ID: 260576.