QS
Product
QRadar SIEM
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar SIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-26274 | 5.4 | Jun 27 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2020-4929 | 5.4 | May 5 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4364 | 5.4 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2020-4274 | 5.4 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4268 | 5.4 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4470 | 5.4 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2019-4454 | 5.4 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2019-4211 | 5.4 | Jul 17 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0 through 7.2.8.15; 7.3.0 through 7.3.2 |
| CVE-2017-1624 | 5.4 | Apr 4 | IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1 |
| CVE-2017-1234 | 5.4 | Jun 27 | IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +11 more |
| CVE-2017-1133 | 5.4 | Mar 7 | IBM QRadar 7.2 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2869 | 5.4 | Nov 30 | Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2015-4957 | 5.4 | Feb 15 | Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to inject arbitrary web script… Affected: 7.1.0 |
| CVE-2015-7409 | 5.4 | Jan 1 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified… Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5 |
| CVE-2023-50950 | 5.3 | Jan 17 | IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +2 more |
| CVE-2021-39041 | 5.3 | Jul 12 | IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports Affected: 7.3.0; 7.4.0; 7.5.0 |
| CVE-2021-38939 | 5.3 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2019-4559 | 5.3 | Jan 10 | IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users Affected: 7.3.0 through 7.3.3 |
| CVE-2019-4262 | 5.3 | Sep 26 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF) Affected: 7.2.0 before 7.2.8; 7.3.0 before 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +17 more |
| CVE-2018-2022 | 5.3 | Jul 17 | IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users Affected: 7.2.0 before 7.2.8; 7.3.0 through 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +12 more |
| CVE-2018-1729 | 5.3 | Apr 19 | IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users Affected: 7.3.0 through 7.3.2 |
| CVE-2018-1733 | 5.3 | Jan 29 | IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could allow an attacker to modify displayed… Affected: 7.2.0 through 7.2.8; 7.3.0 through 7.3.1; 7.2.8; 7.3.1 |
| CVE-2016-9725 | 5.3 | Mar 7 | IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request resources from external sites, avoiding… Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-9720 | 5.3 | Mar 7 | IBM QRadar 7.2 discloses sensitive information to unauthorized users Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2872 | 5.3 | Jul 2 | Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files… Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +1 more |
| CVE-2015-2005 | 5.3 | Feb 15 | IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not properly expire sessions, which allows remote attackers to obtain sensitive… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2025-13995 | 5.0 | Mar 19 | IBM QRadar SIEM Information Disclosure Affected: 7.5.0 through 7.5.0 Update Pack 14 |
| CVE-2015-2007 | 5.0 | Jan 3 | Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary files via a crafted URL Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5 |
| CVE-2023-43041 | 4.9 | Oct 29 | IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +1 more |
| CVE-2021-38936 | 4.9 | Jul 20 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2020-4993 | 4.9 | May 5 | IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2024-56463 | 4.8 | Feb 14 | IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +6 more |
| CVE-2022-22320 | 4.8 | May 11 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +8 more |
| CVE-2022-22345 | 4.8 | Apr 27 | IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2019-4654 | 4.8 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle… Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2015-2008 | 4.4 | Feb 15 | IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +1 more |
| CVE-2023-26273 | 4.3 | Jun 27 | IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2021-38874 | 4.3 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-29776 | 4.3 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-29863 | 4.3 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2020-5032 | 4.3 | Feb 4 | IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +5 more |
| CVE-2020-4786 | 4.3 | Jan 27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2019-4593 | 4.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4509 | 4.3 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2016-9730 | 4.3 | Mar 7 | IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-9722 | 4.2 | Jan 10 | IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |