QRadar SIEM vulnerabilities | LiveThreat CVE Feed

Product

QRadar SIEM

by IBM · last CVE Oct 20, 2026

On CISA KEVExploited in the wild

193

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities193 In the news0 Timeline

Severity mix

Critical 7High 57Medium 96Low 9

Severity

All severities193 Critical7 High57 Medium96 Low9

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add QRadar SIEM to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-4054	3.3	0%	Jul 17	IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system Affected: 7.2.0 through 7.2.8.15; 7.3.0 through 7.3.2
CVE-2017-1733	3.3	0%	Apr 4	IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1
CVE-2016-2877	3.3	0%	Nov 30	IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more
CVE-2016-2874	3.1	1%	Nov 30	IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more
CVE-2024-56464	2.7	0%	Dec 9	IBM QRadar SIEM is affected by an information disclosure vulnerability Affected: 7.5 through 7.5.0 UP14 IF01
CVE-2016-2868	2.7	1%	Jul 2	IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in… Affected: through 7.2.6
CVE-2025-0164	2.3	0%	Sep 14	IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +9 more
CVE-2020-4787	2.3	0%	Jan 27	IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF) Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more
CVE-2018-1725	2.3	0%	Nov 5	IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure Affected: 7.3.0 through 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +4 more