CVE-2022-34351

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-312

Affected software

Vendor	Product	Versions
IBM	QRadar SIEM	>= 7.4.0, < 7.4.3 Fix Pack 7; >= 7.5.0, < 7.5.0 Update Pack 3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/230402VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6955059Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/230402VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6955059Patch, Vendor Advisory

Timeline

Published: Feb 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-343526.5IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile a CVE-2022-343543.3IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user o CVE-2022-343555.5IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version informatio CVE-2022-343567.8IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root priv CVE-2022-343576.5IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limit CVE-2022-343585.4IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th CVE-2022-34367.5A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is CVE-2022-343617.5IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive CVE-2022-343624.6IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This cou CVE-2022-343637.5Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX applic CVE-2022-343644.4Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead CVE-2022-343656.5WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorize