QS
Product
QRadar SIEM
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar SIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-26273 | 4.3 | Jun 27 | IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2021-38874 | 4.3 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-29776 | 4.3 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-29863 | 4.3 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2020-5032 | 4.3 | Feb 4 | IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +5 more |
| CVE-2020-4786 | 4.3 | Jan 27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2019-4593 | 4.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4509 | 4.3 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2016-9730 | 4.3 | Mar 7 | IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-9722 | 4.2 | Jan 10 | IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |
| CVE-2019-4054 | 3.3 | Jul 17 | IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system Affected: 7.2.0 through 7.2.8.15; 7.3.0 through 7.3.2 |
| CVE-2017-1733 | 3.3 | Apr 4 | IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1 |
| CVE-2016-2877 | 3.3 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2016-2874 | 3.1 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2024-56464 | 2.7 | Dec 9 | IBM QRadar SIEM is affected by an information disclosure vulnerability Affected: 7.5 through 7.5.0 UP14 IF01 |
| CVE-2016-2868 | 2.7 | Jul 2 | IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in… Affected: through 7.2.6 |
| CVE-2025-0164 | 2.3 | Sep 14 | IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +9 more |
| CVE-2020-4787 | 2.3 | Jan 27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2018-1725 | 2.3 | Nov 5 | IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure Affected: 7.3.0 through 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +4 more |
| CVE-2015-5044 | – | Nov 8 | The Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x before 7.2.5 Patch 4 IF3 allows remote attackers to cause a denial of service via… Affected: 7.0.0; 7.0.1; 7.1.0; 7.2.0; 7.2.1; 7.2.2; +3 more |
| CVE-2015-4930 | – | Oct 4 | IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges by leveraging… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2015-2016 | – | Oct 4 | Unspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2015-2011 | – | Oct 4 | The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2014-6075 | – | Nov 28 | IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2014-4832 | – | Nov 28 | IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2014-4829 | – | Nov 28 | Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 |
| CVE-2014-4833 | – | Oct 19 | IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote authenticated users to gain privileges via invalid input Affected: 7.1.0; 7.2.0 |
| CVE-2014-4830 | – | Oct 19 | IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote… Affected: 7.1.0; 7.2.0 |
| CVE-2014-4828 | – | Oct 19 | IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request Affected: 7.1.0; 7.2.0 |
| CVE-2014-4827 | – | Oct 19 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: 7.1.0; 7.2.0 |
| CVE-2014-4825 | – | Oct 19 | IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not properly implement secure connections, which allows man-in-the-middle attackers to discover cleartext credentials… Affected: 7.1.0; 7.2.0 |
| CVE-2014-3091 | – | Oct 13 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.1.x and 7.2.x allows remote attackers to inject arbitrary web script or HTML via a crafted URL Affected: 7.1.0; 7.2.0 |
| CVE-2014-3062 | – | Sep 27 | Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors Affected: 7.1.0; 7.2.0 |
| CVE-2014-4826 | – | Sep 18 | IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attackers to obtain sensitive cleartext information by sniffing the… Affected: 7.2.0 |
| CVE-2014-4824 | – | Sep 18 | SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors Affected: 7.2.0 |
| CVE-2014-0838 | – | Jan 30 | The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the… Affected: through 7.2.0 |
| CVE-2014-0837 | – | Jan 30 | The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Affected: through 7.2.0 |
| CVE-2014-0836 | – | Jan 30 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL Affected: through 7.2.0 |
| CVE-2014-0835 | – | Jan 30 | Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests… Affected: through 7.2.0 |
| CVE-2013-6307 | – | Nov 29 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors Affected: 7.0.0 |
| CVE-2013-5463 | – | Nov 29 | The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injecting a (1) DLL or (2) configuration… Affected: through 7.1.0; 7.0.0; 7.0.1 |
| CVE-2013-5448 | – | Nov 29 | Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users… Affected: 7.1.0; 7.2.0 |
| CVE-2013-2970 | – | Jun 3 | Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system… Affected: 7.0.0; 7.0.1; 7.1.0 |