QS
Product
QRadar Security Information and Event Management
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar Security Information and Event Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9728 | 7.5 | Mar 7 | IBM Qradar 7.2 is vulnerable to SQL injection Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2876 | 7.5 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2015-4956 | 7.4 | Feb 15 | The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors Affected: 7.1.0 |
| CVE-2022-43863 | 7.2 | Mar 22 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +9 more |
| CVE-2020-4512 | 7.2 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2025-33121 | 7.1 | Jun 19 | IBM QRadar SIEM XML external entity injection Affected: 7.5 through 7.5.0 Update Pack 12 |
| CVE-2018-1730 | 7.1 | Dec 5 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.2.0 through 7.2.8; 7.3.0 through 7.3.1; 7.2.8; 7.3.1 |