VDB
CVE-2021-37136
CVE-2021-37136
PUBLISHED
CVSS 8.699999809265137 HIGH
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.
EPSS 5.50% · 92.0th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
5.50%
92.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hitachi | Hitachi Ops Center | |
| Oracle | Oracle Fusion Middleware 14.1.1.0.0 | |
| IBM | IBM QRadar SIEM 7.5 | |
| Oracle | Oracle Fusion Middleware 8.5.6 | |
| Dell | Dell Data Protection Advisor <19.12 SP 1 | |
| Oracle | Oracle Fusion Middleware 12.2.1.4.0 | |
| Red Hat | Red Hat OpenShift Application Runtimes 1.0 | |
| Oracle | Oracle Fusion Middleware 12.2.1.3.0 | |
| Red Hat | Red Hat JBoss A-MQ Streams <2.4.0 | |
| Dell | Dell PowerEdge | |
| JFrog | JFrog Artifactory <7.46.3 | |
| Fedora | Fedora Linux | |
| Dell | Dell ECS <3.8.1.0 | |
| Red Hat | Red Hat Enterprise Linux | |
| SUSE | SUSE Linux |
Timeline
- Sep 9, 2021 CVE Published
- Oct 20, 2021 EPSS Score
- Dec 4, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 8, 2022 EPSS Score
- Feb 10, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jun 2, 2022 EPSS Score
- Sep 24, 2022 EPSS Score
- Nov 19, 2022 EPSS Score
- Jan 15, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
References
- https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixFMW advisory
- https://www.dell.com/support/kbdoc/000220669/dsa-2023-= advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1459.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1459 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2674.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2674 advisory
- https://www.dell.com/support/kbdoc/000340538 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0794.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0794 advisory
- https://www.dell.com/support/kbdoc/000223839/dsa-2024-= advisory
- https://www.dell.com/support/kbdoc/en-us/000209268/dsa-2023-014-dell-poweredge-server-security-update-for-intel-february-2023-security-advisories-2023-1-ipu advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0097.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0097 advisory
- https://access.redhat.com/errata/RHSA-2021:3959 advisory
- https://access.redhat.com/errata/RHSA-2021:4851 advisory
- https://access.redhat.com/errata/RHSA-2021:5128 advisory
- https://access.redhat.com/errata/RHSA-2021:5129 advisory
- https://access.redhat.com/errata/RHSA-2021:5127 advisory
- https://access.redhat.com/errata/RHSA-2022:0138 advisory
- https://access.redhat.com/errata/RHSA-2022:0520 advisory
…and 24 more