Qradar (Ibm) - vulnerabilities (CVEs)

15 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2026-09-18. Vendor: Ibm.

CVEs of Qradar

CVE-2025-33141 - CVSS 6.5 (medium), 2026-09-18: IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect…
CVE-2026-5522 - CVSS 6.7 (medium), 2026-09-04: IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
CVE-2026-10025 - CVSS 9.8 (critical), 2026-08-05: IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability…
CVE-2026-13477 - CVSS 8.8 (high), 2026-08-05: IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands…
CVE-2024-56462 - CVSS 8.8 (high), 2026-05-27: IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain…
CVE-2020-4980 - CVSS 6.5 (medium), 2021-07-16: IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data…
CVE-2020-4270 - CVSS 8.4 (high), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.
CVE-2020-4274 - CVSS 5.4 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM…
CVE-2020-4269 - CVSS 7.5 (high), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2020-4272 - CVSS 8.8 (high), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a…
CVE-2020-4268 - CVSS 5.4 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4271 - CVSS 6.3 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user.…
CVE-2020-4294 - CVSS 6.3 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests…
CVE-2019-4654 - CVSS 4.8 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using…
CVE-2019-4594 - CVSS 5.9 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
CVE-2019-4593 - CVSS 4.3 (medium), 2020-04-15: IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM…
CVE-2019-4581 - CVSS 6.1 (medium), 2019-11-09: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2019-4509 - CVSS 4.3 (medium), 2019-11-09: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive…
CVE-2019-4470 - CVSS 5.4 (medium), 2019-11-09: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2019-4454 - CVSS 5.4 (medium), 2019-11-09: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…