QS
Product
QRadar SIEM
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar SIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 7.1.0; 7.1.0; 7.1.0; 7.1.1; 7.1.1; 7.1.1; +34 more |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 7.1.0; 7.1.0; 7.1.0; 7.1.1; 7.1.1; 7.1.1; +34 more |
| CVE-2026-10025 | 9.8 | Aug 5 | IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +20 more |
| CVE-2021-38869 | 9.8 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2020-4979 | 9.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2025-33117 | 9.1 | Jun 19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +7 more |
| CVE-2021-20399 | 9.1 | Jul 27 | IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
| CVE-2026-13477 | 8.8 | Aug 5 | IBM QRadar SIEM is vulnerable to remote code execution by privileged users Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +20 more |
| CVE-2024-56462 | 8.8 | May 27 | IBM QRadar SIEM is vulnerable to using components with known vulnerabilities Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +16 more |
| CVE-2020-4888 | 8.8 | Jan 28 | IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of… Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2020-4280 | 8.8 | Oct 8 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java… Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.1; 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4272 | 8.8 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4212 | 8.8 | Jul 25 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that… Affected: 7.2.0 before 7.2.8; 7.3.0 before 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +14 more |
| CVE-2018-1571 | 8.8 | Sep 11 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0 through 7.2.7; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2018-1418 | 8.8 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2015-2009 | 8.8 | Mar 29 | Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.x before 7.2.5 Patch 4 allows remote… Affected: 7.2.0 before 7.2.5; 7.1.0; 7.1.0; 7.1.0; 7.2.5; 7.2.5; +1 more |
| CVE-2017-1696 | 8.8 | Dec 20 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.3.0; 7.3.0; 7.3.0; 7.3.0; 7.3.0; 7.3.0 |
| CVE-2016-9726 | 8.8 | Mar 7 | IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2873 | 8.8 | Nov 30 | SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2016-2875 | 8.8 | Aug 8 | IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2016-9727 | 8.5 | Mar 7 | IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2026-93442 | 8.2 | Oct 20 | IBM QRadar SIEM Out-of-bounds Read Affected: 7.6.0.0 through 7.6.0.4; 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 |
| CVE-2023-50949 | 8.1 | Apr 11 | IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +3 more |
| CVE-2020-5013 | 8.1 | May 5 | IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4486 | 8.1 | Aug 11 | IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation Affected: 7.2.0 through 7.2.9 |
| CVE-2018-2024 | 8.1 | Jul 22 | IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 7.2.0; 7.3.0 |
| CVE-2019-4210 | 8.1 | Apr 8 | IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application… Affected: 7.3.2; 7.3.2 |
| CVE-2016-9724 | 8.1 | Mar 7 | IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2878 | 8.0 | Nov 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2025-36007 | 7.8 | Oct 27 | IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +10 more |
| CVE-2025-33120 | 7.8 | Aug 22 | IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +8 more |
| CVE-2021-39088 | 7.8 | Jul 28 | IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2021-20401 | 7.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4932 | 7.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4270 | 7.8 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4508 | 7.8 | Jan 10 | IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker Affected: 7.3.0 through 7.3.3 |
| CVE-2016-2880 | 7.8 | Mar 1 | IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +2 more |
| CVE-2016-2879 | 7.8 | Mar 1 | IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +2 more |
| CVE-2016-2871 | 7.8 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2020-4509 | 7.6 | Jun 4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0; 7.4.0 |
| CVE-2023-30994 | 7.5 | Oct 14 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +1 more |
| CVE-2023-26276 | 7.5 | Jun 27 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2022-34351 | 7.5 | Feb 17 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +7 more |
| CVE-2023-22875 | 7.5 | Jan 17 | IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key Affected: 7.4.0; 7.5.0 |
| CVE-2022-22480 | 7.5 | Oct 7 | IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +5 more |
| CVE-2021-29755 | 7.5 | Jul 20 | IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2021-38919 | 7.5 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-38878 | 7.5 | Apr 27 | IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-20400 | 7.5 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2021-29750 | 7.5 | Sep 15 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.3.0; 7.4.0 |