IBM QRadar SIEM
100 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36051 | 7.5.0 – 7.5.0 Update Pack 14 | IBM QRadar SIEM Information Disclosure | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-15051 | 7.5.0 – 7.5.0 Update Pack 14 | IBM QRadar SIEM Cross-Site Scripting | MEDIUM 5.4 | 0.1 % | ||
| CVE-2026-1276 | 7.5.0 – 7.5.0 Update Pack 14 | IBM QRadar SIEM Cross-Site Scripting | MEDIUM 5.4 | 0.1 % | ||
| CVE-2025-36138 | 7.5.0 – 7.5.0 Update Pack 13 | IBM QRadar SIEM cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-36170 | 7.5.0 – 7.5.0 Update Pack 13 | IBM QRadar SIEM cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-36007 | 7.5.0 – 7.5.0 UP13 IF02 | IBM QRadar SIEM incorrect privilege assignment | HIGH 7.8 | 0.1 % | ||
| CVE-2025-0164 | 7.5 – 7.5.0 UP13 IF01 | IBM QRadar SIEM information disclosure | LOW 2.3 | 0.1 % | ||
| CVE-2025-36042 | 7.5 – 7.5.0 Update Pack 13 | IBM QRadar SIEM cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-33120 | 7.5 – 7.5.0 Update Pack 13 | IBM QRadar SIEM privilege escalation | HIGH 7.8 | 0.2 % | ||
| CVE-2025-33118 | 7.5 – 7.5.0 Update Pack 12 | IBM QRadar SIEM cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-33097 | 7.5, – 7.5.0 Update Pack 12 | IBM QRadar SIEM cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-33117 | 7.5 – 7.5.0 Update Pack 12 | IBM QRadar SIEM command execution | CRITICAL 9.1 | 0.6 % | ||
| CVE-2025-33121 | 7.5 – 7.5.0 Update Pack 12 | IBM QRadar SIEM XML external entity injection | HIGH 7.1 | 0.5 % | ||
| CVE-2025-36050 | 7.5 – 7.5.0 Update Pack 12 | IBM QRadar SIEM information disclosure | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-56463 | 7.5 – 7.5.0 UP11 | IBM QRadar SIEM cross-site scripting | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-28786 | 7.5 | IBM QRadar SIEM information disclosure | MEDIUM 6.5 | 0.2 % | ||
| CVE-2024-47107 | 7.5 | IBM QRadar SIEM cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2024-27269 | 7.5 | IBM QRadar SIEM information disclosure | MEDIUM 6.8 | 0.4 % | ||
| CVE-2023-50949 | 7.5 | IBM QRadar improper certificate validation | HIGH 8.1 | 0.3 % | ||
| CVE-2023-50961 | 7.5 | IBM QRadar cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-28784 | 7.5 | IBM QRadar cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-50950 | 7.5 | IBM QRadar information disclosure | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-47146 | 7.5 | IBM QRadar SIEM information disclosure | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-43041 | 7.5 | IBM QRadar information disclosure | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-30994 | 7.5.0 | IBM QRadar SIEM information disclosure | HIGH 7.5 | 0.3 % | ||
| CVE-2023-40367 | 7.5.0 | IBM QRadar SIEM cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-43863 | 7.4, 7.5 | IBM QRadar SIEM privilege escalation | HIGH 7.2 | 0.7 % | ||
| CVE-2022-34351 | 7.4.0 – < 7.4.3 Fix Pack 7 ; 7.5.0 – < 7.5.0 Update Pack 3 | IBM QRadar SIEM information disclosure | HIGH 7.5 | 0.4 % | ||
| CVE-2022-30613 | 7.4.0 ; 7.5.0 | IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-22480 | 7.4.0 ; 7.5.0 | IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information d | HIGH 7.5 | 0.9 % | ||
| CVE-2021-39088 | 7.3 ; 7.4 ; 7.5 | IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities t | HIGH 7.8 | 0.2 % | ||
| CVE-2022-22424 | 7.3.0 ; 7.4.0 ; 7.5.0 ; … | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permi | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-38936 | 7.3.0 ; 7.4.0 ; 7.5.0 ; … | IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893. | MEDIUM 4.9 | 0.9 % | ||
| CVE-2021-29755 | 7.3.0 ; 7.4.0 ; 7.5.0 ; … | IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015. | HIGH 7.5 | 0.5 % | ||
| CVE-2021-39041 | 7.3 ; 7.4 ; 7.5 | IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specif | MEDIUM 5.3 | 1.0 % | ||
| CVE-2022-22320 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 4.8 | 0.5 % | ||
| CVE-2022-22345 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th | MEDIUM 4.8 | 1.8 % | ||
| CVE-2021-38939 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creatin | MEDIUM 5.3 | 0.8 % | ||
| CVE-2021-38919 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021 | HIGH 7.5 | 1.1 % | ||
| CVE-2021-38878 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X- | HIGH 7.5 | 1.2 % | ||
| CVE-2021-38874 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force | MEDIUM 4.3 | 0.7 % | ||
| CVE-2021-38869 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force | CRITICAL 9.8 | 0.9 % | ||
| CVE-2021-29776 | 7.3.3 ; 7.4.3 ; 7.5.0 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing | MEDIUM 4.3 | 0.6 % | ||
| CVE-2021-29863 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthoriz | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-29849 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-29779 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity | MEDIUM 5.9 | 1.2 % | ||
| CVE-2021-20400 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info | HIGH 7.5 | 0.7 % | ||
| CVE-2021-29750 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info | HIGH 7.5 | 0.7 % | ||
| CVE-2021-29880 | 7.4.3 | IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenant | MEDIUM 6.5 | 0.9 % | ||
| CVE-2021-20399 | 7.3.0 ; 7.4.0 ; 7.4.3 ; … | IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing | CRITICAL 9.1 | 1.8 % | ||
| CVE-2021-20337 | 7.3.0 ; 7.4.0 ; 7.4.3 ; … | IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker | HIGH 7.5 | 0.7 % | ||
| CVE-2021-20429 | 1.0.0 ; 4.1.1 | IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IB | MEDIUM 5.3 | 0.8 % | ||
| CVE-2021-20393 | 1.0.0 ; 4.1.1 | IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technic | HIGH 7.5 | 1.4 % | ||
| CVE-2021-20392 | 1.0.0 ; 4.1.1 | IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit | MEDIUM 6.1 | 0.7 % | ||
| CVE-2021-20391 | 1.0.0 ; 4.1.1 | IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system | MEDIUM 4.0 | 0.2 % | ||
| CVE-2021-20401 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth | HIGH 7.8 | 0.2 % | ||
| CVE-2021-20397 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-5013 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could | HIGH 8.1 | 1.5 % | ||
| CVE-2020-4993 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path tr | MEDIUM 4.9 | 1.3 % | ||
| CVE-2020-4979 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffi | CRITICAL 9.8 | 1.6 % | ||
| CVE-2020-4932 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth | HIGH 7.8 | 0.2 % | ||
| CVE-2020-4929 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 5.4 | 0.5 % | ||
| CVE-2020-4883 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the syst | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-5032 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. | MEDIUM 4.3 | 0.5 % | ||
| CVE-2020-4888 | 7.3 ; 7.4 ; 7.3.3.Patch.7 ; … | IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, | HIGH 8.8 | 62 % | ||
| CVE-2020-4789 | 7.3.0 ; 7.4.0 ; 7.3.3 Patch 5 ; … | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse dire | MEDIUM 6.5 | 2.6 % | ||
| CVE-2020-4787 | 7.3.0 ; 7.4.0 ; 7.3.3 Patch 5 ; … | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery ( | MEDIUM 4.2 | 0.3 % | ||
| CVE-2020-4786 | 7.3.0 ; 7.4.0 ; 7.3.3 Patch 5 ; … | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery ( | MEDIUM 5.4 | 0.6 % | ||
| CVE-2018-1725 | 7.3.0 ; 7.4 ; 7.3.3.Patch.5 ; … | IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440. | LOW 3.2 | 0.3 % | ||
| CVE-2020-4280 | 7.3.0 ; 7.3.3.Patch.4 ; 7.4.0 ; … | IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of | HIGH 8.8 | 69 % | ||
| CVE-2019-4545 | 7.3.0 ; 7.3.3.Patch.4 ; 7.4.0 ; … | IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 1 | HIGH 7.5 | 2.1 % | ||
| CVE-2020-4513 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-4512 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands. | CRITICAL 9.1 | 2.0 % | ||
| CVE-2020-4511 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow | MEDIUM 6.5 | 1.1 % | ||
| CVE-2020-4510 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could | HIGH 7.6 | 2.0 % | ||
| CVE-2020-4364 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 5.4 | 0.6 % | ||
| CVE-2020-4509 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could | HIGH 7.6 | 1.5 % | ||
| CVE-2020-4151 | 7.3.0 ; 7.3.3 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. | MEDIUM 6.5 | 1.1 % | ||
| CVE-2019-4559 | 7.3.0 ; 7.3.3 | IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further atta | MEDIUM 5.3 | 1.1 % | ||
| CVE-2019-4508 | 7.3.0 ; 7.3.3 | IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. IBM X-Force | HIGH 7.8 | 0.3 % | ||
| CVE-2019-4262 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthor | MEDIUM 5.3 | 1.0 % | ||
| CVE-2019-4212 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized | HIGH 8.8 | 0.5 % | ||
| CVE-2018-2024 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified | HIGH 8.1 | 0.7 % | ||
| CVE-2019-4211 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4054 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in fu | MEDIUM 4.0 | 0.3 % | ||
| CVE-2018-2022 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on t | MEDIUM 5.3 | 1.3 % | ||
| CVE-2018-2021 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 6.1 | 0.9 % | ||
| CVE-2019-4264 | 7.2.8 | IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middl | MEDIUM 5.9 | 1.0 % | ||
| CVE-2018-1729 | 7.3 | IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the syste | MEDIUM 5.3 | 1.8 % | ||
| CVE-2019-4210 | 7.3.2 | IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure | CRITICAL 9.4 | 2.2 % | ||
| CVE-2017-1695 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info | HIGH 7.5 | 1.3 % | ||
| CVE-2018-1733 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could | MEDIUM 5.3 | 1.7 % | ||
| CVE-2018-1732 | 1.14.0 | IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further at | HIGH 7.5 | 1.4 % | ||
| CVE-2018-1730 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could | HIGH 7.1 | 1.9 % | ||
| CVE-2018-1728 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the | MEDIUM 5.4 | 0.7 % | ||
| CVE-2018-1650 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication configured by the adminis | MEDIUM 5.9 | 0.3 % | ||
| CVE-2018-1568 | 7.2 ; 7.3 | IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118. | MEDIUM 4.0 | 0.4 % | ||
| CVE-2017-1622 | 7.3 ; 7.2.8 | IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a t | HIGH 7.4 | 0.6 % | ||
| CVE-2018-1571 | 7.2 ; 7.3 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-craft | HIGH 8.8 | 4.7 % | ||
| CVE-2018-1612 | 7.2 ; 7.3 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive inf | MEDIUM 5.8 | 56 % |