QS
Product
QRadar Security Information and Event Management
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar Security Information and Event Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20337 | 7.5 | Jul 26 | IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
| CVE-2019-4545 | 7.5 | Oct 8 | IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.1; 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4269 | 7.5 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2017-1695 | 7.5 | Feb 15 | IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.2.0 through 7.2.8; 7.3.0 through 7.3.1; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +13 more |
| CVE-2017-1162 | 7.5 | Sep 12 | IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |
| CVE-2016-9738 | 7.5 | Jun 27 | IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +11 more |
| CVE-2016-9740 | 7.5 | Mar 7 | IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-9728 | 7.5 | Mar 7 | IBM Qradar 7.2 is vulnerable to SQL injection Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2876 | 7.5 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2015-4956 | 7.4 | Feb 15 | The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors Affected: 7.1.0 |
| CVE-2022-43863 | 7.2 | Mar 22 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +9 more |
| CVE-2020-4512 | 7.2 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2025-33121 | 7.1 | Jun 19 | IBM QRadar SIEM XML external entity injection Affected: 7.5 through 7.5.0 Update Pack 12 |
| CVE-2018-1730 | 7.1 | Dec 5 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.2.0 through 7.2.8; 7.3.0 through 7.3.1; 7.2.8; 7.3.1 |
| CVE-2024-27269 | 6.8 | May 14 | IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +3 more |
| CVE-2025-33119 | 6.5 | Nov 12 | IBM QRadar SIEM Information Disclosure Affected: 7.5 through 7.5.0 UP14 |
| CVE-2024-28786 | 6.5 | Jan 28 | IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +4 more |
| CVE-2023-47146 | 6.5 | Dec 19 | IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +2 more |
| CVE-2022-34352 | 6.5 | Jun 27 | IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2021-29880 | 6.5 | Aug 13 | IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM data to the incorrect… Affected: 7.4.3; 7.4.3 |
| CVE-2020-4980 | 6.5 | Jul 16 | IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +5 more |
| CVE-2020-4883 | 6.5 | May 5 | IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4789 | 6.5 | Jan 27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2020-4485 | 6.5 | Aug 11 | IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks Affected: 7.2.0 through 7.2.9 |
| CVE-2020-4511 | 6.5 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2020-4151 | 6.5 | Apr 14 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation Affected: 7.3.0 through 7.3.3 |
| CVE-2017-1723 | 6.5 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2016-9750 | 6.5 | May 15 | IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user Affected: 7.2.0; 7.3.0 |
| CVE-2016-9729 | 6.5 | Mar 7 | IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2881 | 6.5 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2020-4294 | 6.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF) Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4271 | 6.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2017-1722 | 6.3 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2025-36050 | 6.2 | Jun 19 | IBM QRadar SIEM information disclosure Affected: 7.5 through 7.5.0 Update Pack 12 |
| CVE-2021-29849 | 6.1 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2021-20397 | 6.1 | May 5 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4513 | 6.1 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2019-4581 | 6.1 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2018-2021 | 6.1 | Jul 17 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0 before 7.2.8; 7.3.0 through 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +12 more |
| CVE-2017-1724 | 6.1 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2017-1623 | 6.1 | Jan 10 | IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |
| CVE-2016-9723 | 6.1 | Mar 7 | IBM QRadar 7.2 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2021-29779 | 5.9 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host… Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
| CVE-2019-4594 | 5.9 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4264 | 5.9 | May 29 | IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or… Affected: 7.1.2 before 7.2.8; 7.2.8; 7.2.8; 7.2.8 |
| CVE-2016-9972 | 5.9 | Jun 27 | IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +11 more |
| CVE-2018-1612 | 5.8 | Jul 17 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information Affected: 7.2.0 through 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +12 more |
| CVE-2017-1721 | 5.6 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2025-36051 | 5.5 | Mar 19 | IBM QRadar SIEM Information Disclosure Affected: 7.5.0 through 7.5.0 Update Pack 14 |
| CVE-2022-30613 | 5.5 | Oct 7 | IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +5 more |