{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP9 IF02","product":{"name":"QRadar SIEM","vendor":{"name":"IBM","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2023-52675","url":"https://www.cve.org/CVERecord?id=CVE-2023-52675"},{"name":"CVE-2023-4692","url":"https://www.cve.org/CVERecord?id=CVE-2023-4692"},{"name":"CVE-2024-26656","url":"https://www.cve.org/CVERecord?id=CVE-2024-26656"},{"name":"CVE-2024-26974","url":"https://www.cve.org/CVERecord?id=CVE-2024-26974"},{"name":"CVE-2023-43788","url":"https://www.cve.org/CVERecord?id=CVE-2023-43788"},{"name":"CVE-2024-26585","url":"https://www.cve.org/CVERecord?id=CVE-2024-26585"},{"name":"CVE-2024-27397","url":"https://www.cve.org/CVERecord?id=CVE-2024-27397"},{"name":"CVE-2024-35854","url":"https://www.cve.org/CVERecord?id=CVE-2024-35854"},{"name":"CVE-2023-52878","url":"https://www.cve.org/CVERecord?id=CVE-2023-52878"},{"name":"CVE-2024-5564","url":"https://www.cve.org/CVERecord?id=CVE-2024-5564"},{"name":"CVE-2023-52669","url":"https://www.cve.org/CVERecord?id=CVE-2023-52669"},{"name":"CVE-2024-36004","url":"https://www.cve.org/CVERecord?id=CVE-2024-36004"},{"name":"CVE-2024-26859","url":"https://www.cve.org/CVERecord?id=CVE-2024-26859"},{"name":"CVE-2024-35959","url":"https://www.cve.org/CVERecord?id=CVE-2024-35959"},{"name":"CVE-2024-35855","url":"https://www.cve.org/CVERecord?id=CVE-2024-35855"},{"name":"CVE-2024-26801","url":"https://www.cve.org/CVERecord?id=CVE-2024-26801"},{"name":"CVE-2024-36007","url":"https://www.cve.org/CVERecord?id=CVE-2024-36007"},{"name":"CVE-2021-47311","url":"https://www.cve.org/CVERecord?id=CVE-2021-47311"},{"name":"CVE-2024-35852","url":"https://www.cve.org/CVERecord?id=CVE-2024-35852"},{"name":"CVE-2023-52781","url":"https://www.cve.org/CVERecord?id=CVE-2023-52781"},{"name":"CVE-2024-35845","url":"https://www.cve.org/CVERecord?id=CVE-2024-35845"},{"name":"CVE-2021-47073","url":"https://www.cve.org/CVERecord?id=CVE-2021-47073"},{"name":"CVE-2024-26804","url":"https://www.cve.org/CVERecord?id=CVE-2024-26804"},{"name":"CVE-2023-52686","url":"https://www.cve.org/CVERecord?id=CVE-2023-52686"},{"name":"CVE-2021-47236","url":"https://www.cve.org/CVERecord?id=CVE-2021-47236"},{"name":"CVE-2024-35890","url":"https://www.cve.org/CVERecord?id=CVE-2024-35890"},{"name":"CVE-2023-52877","url":"https://www.cve.org/CVERecord?id=CVE-2023-52877"},{"name":"CVE-2024-26826","url":"https://www.cve.org/CVERecord?id=CVE-2024-26826"},{"name":"CVE-2024-26583","url":"https://www.cve.org/CVERecord?id=CVE-2024-26583"},{"name":"CVE-2024-35888","url":"https://www.cve.org/CVERecord?id=CVE-2024-35888"},{"name":"CVE-2023-52700","url":"https://www.cve.org/CVERecord?id=CVE-2023-52700"},{"name":"CVE-2021-47495","url":"https://www.cve.org/CVERecord?id=CVE-2021-47495"},{"name":"CVE-2024-26675","url":"https://www.cve.org/CVERecord?id=CVE-2024-26675"},{"name":"CVE-2024-26906","url":"https://www.cve.org/CVERecord?id=CVE-2024-26906"},{"name":"CVE-2024-26584","url":"https://www.cve.org/CVERecord?id=CVE-2024-26584"},{"name":"CVE-2024-22365","url":"https://www.cve.org/CVERecord?id=CVE-2024-22365"},{"name":"CVE-2023-43789","url":"https://www.cve.org/CVERecord?id=CVE-2023-43789"},{"name":"CVE-2024-35835","url":"https://www.cve.org/CVERecord?id=CVE-2024-35835"},{"name":"CVE-2024-26735","url":"https://www.cve.org/CVERecord?id=CVE-2024-26735"},{"name":"CVE-2023-52881","url":"https://www.cve.org/CVERecord?id=CVE-2023-52881"},{"name":"CVE-2023-4693","url":"https://www.cve.org/CVERecord?id=CVE-2023-4693"},{"name":"CVE-2021-46972","url":"https://www.cve.org/CVERecord?id=CVE-2021-46972"},{"name":"CVE-2024-34750","url":"https://www.cve.org/CVERecord?id=CVE-2024-34750"},{"name":"CVE-2024-1048","url":"https://www.cve.org/CVERecord?id=CVE-2024-1048"},{"name":"CVE-2023-7008","url":"https://www.cve.org/CVERecord?id=CVE-2023-7008"},{"name":"CVE-2023-52667","url":"https://www.cve.org/CVERecord?id=CVE-2023-52667"},{"name":"CVE-2023-52703","url":"https://www.cve.org/CVERecord?id=CVE-2023-52703"},{"name":"CVE-2024-26759","url":"https://www.cve.org/CVERecord?id=CVE-2024-26759"},{"name":"CVE-2023-52464","url":"https://www.cve.org/CVERecord?id=CVE-2023-52464"},{"name":"CVE-2023-52813","url":"https://www.cve.org/CVERecord?id=CVE-2023-52813"},{"name":"CVE-2024-35838","url":"https://www.cve.org/CVERecord?id=CVE-2024-35838"},{"name":"CVE-2023-52615","url":"https://www.cve.org/CVERecord?id=CVE-2023-52615"},{"name":"CVE-2023-52560","url":"https://www.cve.org/CVERecord?id=CVE-2023-52560"},{"name":"CVE-2021-47069","url":"https://www.cve.org/CVERecord?id=CVE-2021-47069"},{"name":"CVE-2024-35960","url":"https://www.cve.org/CVERecord?id=CVE-2024-35960"},{"name":"CVE-2020-26555","url":"https://www.cve.org/CVERecord?id=CVE-2020-26555"},{"name":"CVE-2024-35789","url":"https://www.cve.org/CVERecord?id=CVE-2024-35789"},{"name":"CVE-2023-52835","url":"https://www.cve.org/CVERecord?id=CVE-2023-52835"},{"name":"CVE-2024-26982","url":"https://www.cve.org/CVERecord?id=CVE-2024-26982"},{"name":"CVE-2021-47310","url":"https://www.cve.org/CVERecord?id=CVE-2021-47310"},{"name":"CVE-2023-52626","url":"https://www.cve.org/CVERecord?id=CVE-2023-52626"},{"name":"CVE-2024-35958","url":"https://www.cve.org/CVERecord?id=CVE-2024-35958"},{"name":"CVE-2021-47456","url":"https://www.cve.org/CVERecord?id=CVE-2021-47456"},{"name":"CVE-2021-47356","url":"https://www.cve.org/CVERecord?id=CVE-2021-47356"},{"name":"CVE-2021-47353","url":"https://www.cve.org/CVERecord?id=CVE-2021-47353"},{"name":"CVE-2023-5090","url":"https://www.cve.org/CVERecord?id=CVE-2023-5090"},{"name":"CVE-2024-27410","url":"https://www.cve.org/CVERecord?id=CVE-2024-27410"},{"name":"CVE-2021-46909","url":"https://www.cve.org/CVERecord?id=CVE-2021-46909"},{"name":"CVE-2024-35853","url":"https://www.cve.org/CVERecord?id=CVE-2024-35853"},{"name":"CVE-2024-26907","url":"https://www.cve.org/CVERecord?id=CVE-2024-26907"}],"links":[],"reference":"CERTFR-2024-AVI-0720","revisions":[{"description":"Version initiale","revision_date":"2024-08-23T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.","title":"Multiples vuln\u00e9rabilit\u00e9s dans IBM QRadar SIEM","vendor_advisories":[{"published_at":"2024-08-22","title":"Bulletin de s\u00e9curit\u00e9 IBM 7166204","url":"https://www.ibm.com/support/pages/node/7166204"}]}