QS
Product
QRadar SIEM
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar SIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27269 | 6.8 | May 14 | IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +3 more |
| CVE-2025-33119 | 6.5 | Nov 12 | IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +11 more |
| CVE-2024-28786 | 6.5 | Jan 28 | IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle… Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +4 more |
| CVE-2023-47146 | 6.5 | Dec 19 | IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +2 more |
| CVE-2022-34352 | 6.5 | Jun 27 | IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2021-29880 | 6.5 | Aug 13 | IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM data to the incorrect… Affected: 7.4.3; 7.4.3 |
| CVE-2020-4980 | 6.5 | Jul 16 | IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +5 more |
| CVE-2020-4883 | 6.5 | May 5 | IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4789 | 6.5 | Jan 27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2020-4485 | 6.5 | Aug 11 | IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks Affected: 7.2.0 through 7.2.9 |
| CVE-2020-4511 | 6.5 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2020-4151 | 6.5 | Apr 14 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation Affected: 7.3.0 through 7.3.3 |
| CVE-2017-1723 | 6.5 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2016-9750 | 6.5 | May 15 | IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user Affected: 7.2.0; 7.3.0 |
| CVE-2016-9729 | 6.5 | Mar 7 | IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2881 | 6.5 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2020-4294 | 6.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF) Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4271 | 6.3 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2017-1722 | 6.3 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2025-36050 | 6.2 | Jun 19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +7 more |
| CVE-2021-29849 | 6.1 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2021-20397 | 6.1 | May 5 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4513 | 6.1 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2019-4581 | 6.1 | Nov 9 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting Affected: 7.3.0 through 7.3.1; 7.3.2; 7.3.2; 7.3.2; 7.3.2; 7.3.2 |
| CVE-2018-2021 | 6.1 | Jul 17 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0 before 7.2.8; 7.3.0 through 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +12 more |
| CVE-2017-1724 | 6.1 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2017-1623 | 6.1 | Jan 10 | IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |
| CVE-2016-9723 | 6.1 | Mar 7 | IBM QRadar 7.2 is vulnerable to cross-site scripting Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2021-29779 | 5.9 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host… Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
| CVE-2019-4594 | 5.9 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4264 | 5.9 | May 29 | IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or… Affected: 7.1.2 before 7.2.8; 7.2.8; 7.2.8; 7.2.8 |
| CVE-2016-9972 | 5.9 | Jun 27 | IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +11 more |
| CVE-2018-1612 | 5.8 | Jul 17 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information Affected: 7.2.0 through 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +12 more |
| CVE-2017-1721 | 5.6 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2025-36051 | 5.5 | Mar 19 | IBM QRadar SIEM Information Disclosure Affected: 7.5.0 through 7.5.0 Update Pack 14 |
| CVE-2022-30613 | 5.5 | Oct 7 | IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +5 more |
| CVE-2022-22424 | 5.5 | Jul 20 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2020-4510 | 5.5 | Jul 14 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0 through 7.3.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; 7.4.0; +2 more |
| CVE-2025-15051 | 5.4 | Mar 19 | IBM QRadar SIEM Cross-Site Scripting Affected: 7.5.0 through 7.5.0 Update Pack 14 |
| CVE-2026-1276 | 5.4 | Mar 19 | IBM QRadar SIEM Cross-Site Scripting Affected: 7.5.0 through 7.5.0 Update Pack 14 |
| CVE-2025-36170 | 5.4 | Oct 27 | IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +10 more |
| CVE-2025-36138 | 5.4 | Oct 27 | IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +10 more |
| CVE-2025-36042 | 5.4 | Aug 22 | IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +8 more |
| CVE-2025-33118 | 5.4 | Aug 1 | IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +7 more |
| CVE-2025-33097 | 5.4 | Jul 15 | IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +7 more |
| CVE-2024-47107 | 5.4 | Dec 7 | IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +5 more |
| CVE-2024-28784 | 5.4 | Mar 27 | IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +2 more |
| CVE-2023-50961 | 5.4 | Mar 27 | IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +1 more |
| CVE-2023-43057 | 5.4 | Nov 11 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +2 more |
| CVE-2023-40367 | 5.4 | Oct 14 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +1 more |