Qradar Siem (Ibm) - vulnerabilities (CVEs)

83 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2025-10-27. Vendor: Ibm.

CVEs of Qradar Siem

CVE-2025-36170 - CVSS 6.4 (medium), 2025-10-27: IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated…
CVE-2025-36138 - CVSS 6.4 (medium), 2025-10-27: IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated…
CVE-2025-36007 - CVSS 7.8 (high), 2025-10-27: IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update…
CVE-2024-27269 - CVSS 6.8 (medium), 2024-05-14: IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants. IBM…
CVE-2023-50949 - CVSS 8.1 (high), 2024-04-11: IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.
CVE-2024-28784 - CVSS 5.4 (medium), 2024-03-27: IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
CVE-2023-50961 - CVSS 5.4 (medium), 2024-03-27: IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2023-50950 - CVSS 5.3 (medium), 2024-01-17: IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.
CVE-2023-47146 - CVSS 6.5 (medium), 2023-12-19: IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified. IBM X-Force ID: 270372.
CVE-2023-43041 - CVSS 6.5 (medium), 2023-10-29: IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data…
CVE-2023-40367 - CVSS 5.4 (medium), 2023-10-14: IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2023-30994 - CVSS 7.5 (high), 2023-10-14: IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID:…
CVE-2022-43863 - CVSS 7.2 (high), 2023-03-22: IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM…
CVE-2022-34351 - CVSS 7.5 (high), 2023-02-17: IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data…
CVE-2022-30613 - CVSS 5.5 (medium), 2022-10-07: IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366.
CVE-2022-22480 - CVSS 7.5 (high), 2022-10-07: IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM…
CVE-2021-39088 - CVSS 7.8 (high), 2022-07-28: IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege…
CVE-2022-22424 - CVSS 5.5 (medium), 2022-07-20: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM…
CVE-2021-38936 - CVSS 4.9 (medium), 2022-07-20: IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893.
CVE-2021-29755 - CVSS 7.5 (high), 2022-07-20: IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015.
CVE-2021-39041 - CVSS 5.3 (medium), 2022-07-12: IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM…
CVE-2022-22320 - CVSS 4.8 (medium), 2022-05-11: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-38874 - CVSS 4.3 (medium), 2022-04-27: IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397.
CVE-2021-38939 - CVSS 5.3 (medium), 2022-04-27: IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM…
CVE-2021-38869 - CVSS 9.8 (critical), 2022-04-27: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.
CVE-2021-38919 - CVSS 7.5 (high), 2022-04-27: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021
CVE-2021-38878 - CVSS 7.5 (high), 2022-04-27: IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.
CVE-2022-22345 - CVSS 4.8 (medium), 2022-04-27: IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-29776 - CVSS 4.3 (medium), 2022-04-27: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID…
CVE-2021-20400 - CVSS 7.5 (high), 2021-12-01: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2021-29863 - CVSS 5.4 (medium), 2021-12-01: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from…
CVE-2021-29849 - CVSS 6.1 (medium), 2021-12-01: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-29779 - CVSS 5.9 (medium), 2021-12-01: IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on…
CVE-2021-29750 - CVSS 7.5 (high), 2021-09-15: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2021-29880 - CVSS 6.5 (medium), 2021-08-13: IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM…
CVE-2021-20399 - CVSS 9.1 (critical), 2021-07-27: IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote…
CVE-2021-20337 - CVSS 7.5 (high), 2021-07-26: IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2021-20392 - CVSS 6.1 (medium), 2021-05-14: IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2021-20391 - CVSS 4 (medium), 2021-05-14: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:…
CVE-2021-20429 - CVSS 5.3 (medium), 2021-05-14: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID:…
CVE-2021-20393 - CVSS 7.5 (high), 2021-05-14: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message…
CVE-2020-4883 - CVSS 6.5 (medium), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force…
CVE-2020-4979 - CVSS 9.8 (critical), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts…
CVE-2021-20397 - CVSS 6.1 (medium), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4932 - CVSS 7.8 (high), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2020-5013 - CVSS 8.1 (high), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…
CVE-2020-4929 - CVSS 5.4 (medium), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4993 - CVSS 4.9 (medium), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks.…
CVE-2021-20401 - CVSS 7.8 (high), 2021-05-05: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2020-5032 - CVSS 4.3 (medium), 2021-02-04: IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID:…
CVE-2020-4888 - CVSS 8.8 (high), 2021-01-28: IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by…
CVE-2020-4787 - CVSS 4.2 (medium), 2021-01-27: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may…
CVE-2020-4789 - CVSS 6.5 (medium), 2021-01-27: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the…
CVE-2020-4786 - CVSS 5.4 (medium), 2021-01-27: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may…
CVE-2018-1725 - CVSS 3.2 (low), 2020-11-05: IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440.
CVE-2020-4280 - CVSS 8.8 (high), 2020-10-08: IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied…
CVE-2019-4545 - CVSS 7.5 (high), 2020-10-08: IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877.
CVE-2020-4512 - CVSS 9.1 (critical), 2020-07-14: IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.
CVE-2020-4513 - CVSS 6.1 (medium), 2020-07-14: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4364 - CVSS 5.4 (medium), 2020-07-14: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4511 - CVSS 6.5 (medium), 2020-07-14: IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command. IBM…
CVE-2020-4510 - CVSS 7.6 (high), 2020-07-14: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…
CVE-2020-4509 - CVSS 7.6 (high), 2020-06-04: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…
CVE-2020-4151 - CVSS 6.5 (medium), 2020-04-14: IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. IBM X-Force ID:…
CVE-2019-4559 - CVSS 5.3 (medium), 2020-01-10: IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system.…
CVE-2019-4508 - CVSS 7.8 (high), 2020-01-10: IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. IBM X-Force ID: 164429.
CVE-2019-4262 - CVSS 5.3 (medium), 2019-09-26: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from…
CVE-2019-4212 - CVSS 8.8 (high), 2019-07-25: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2018-2024 - CVSS 8.1 (high), 2019-07-22: IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended…
CVE-2019-4211 - CVSS 5.4 (medium), 2019-07-17: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2018-2022 - CVSS 5.3 (medium), 2019-07-17: IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM…
CVE-2018-2021 - CVSS 6.1 (medium), 2019-07-17: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2019-4054 - CVSS 4 (medium), 2019-07-17: IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks…
CVE-2019-4264 - CVSS 5.9 (medium), 2019-05-29: IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due…
CVE-2018-1729 - CVSS 5.3 (medium), 2019-04-19: IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID:…
CVE-2019-4210 - CVSS 9.4 (critical), 2019-04-08: IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of…
CVE-2017-1695 - CVSS 7.5 (high), 2019-02-15: IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2018-1733 - CVSS 5.3 (medium), 2019-01-29: IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could allow an attacker…
CVE-2018-1728 - CVSS 5.4 (medium), 2018-12-05: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2018-1650 - CVSS 5.9 (medium), 2018-12-05: IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication configured by the administrator. IBM…
CVE-2018-1732 - CVSS 7.5 (high), 2018-12-05: IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the…
CVE-2018-1568 - CVSS 4 (medium), 2018-12-05: IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.
CVE-2018-1730 - CVSS 7.1 (high), 2018-12-05: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…
CVE-2017-1622 - CVSS 7.4 (high), 2018-12-05: IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by…
CVE-2018-1571 - CVSS 8.8 (high), 2018-09-11: IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an…
CVE-2018-1612 - CVSS 5.8 (medium), 2018-07-17: IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM…