Critical Severity

Security Bulletin: IBM QRadar Advisor With Watson uses components with known vulnerabilities (CVE-2020-36242, CVE-2021-33503, CVE-2020-28493)

Share this post:

The product includes vulnerable components (e.g., framework libraries) that may be identified and exploited with automated tools. This update addresses these vulnerabilities.

CVE(s): CVE-2020-36242, CVE-2021-33503, CVE-2020-28493

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
Qradar Advisor QRadar Advisor 2.5 – QRadar Advisor 2.6.1

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6507113
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/196426
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/203109
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/195894

More stories

Security Bulletin: A security vulnerability in Node.js vm2 module affects IBM Cloud Automation Manager

Dec 3, 2021 7:00 pm EST | Critical Severity

A security vulnerability in Node.js vm2 module affects IBM Cloud Automation Manager. ...read more


Security Bulletin: IBM Event Streams affected by potential buffer overflow in Golang (CVE-2021-38297)

Dec 3, 2021 7:00 pm EST | Critical Severity

IBM Event Streams affected by vulnerabilitiy in Golang which may result in a buffer overflow (CVE-2021-38297) ...read more


Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Dec 2, 2021 7:01 pm EST | Critical Severity

Security vulnerabilities have been addressed in IBM Cognos Analytics 11.1.7 Fix Pack 4 and IBM Cognos Analytics 11.2.1. ...read more