QS
Product
QRadar SIEM
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar SIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 7.1.0; 7.1.0; 7.1.0; 7.1.1; 7.1.1; 7.1.1; +34 more |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 7.1.0; 7.1.0; 7.1.0; 7.1.1; 7.1.1; 7.1.1; +34 more |
| CVE-2026-10025 | 9.8 | Aug 5 | IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +20 more |
| CVE-2021-38869 | 9.8 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2020-4979 | 9.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2025-33117 | 9.1 | Jun 19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +7 more |
| CVE-2021-20399 | 9.1 | Jul 27 | IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
Showing 7