QS
Product
QRadar Security Information and Event Management
On CISA KEVExploited in the wild
193
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 57Medium 96Low 9
Watch
Add QRadar Security Information and Event Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13477 | 8.8 | Aug 5 | IBM QRadar SIEM is vulnerable to remote code execution by privileged users Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +20 more |
| CVE-2024-56462 | 8.8 | May 27 | IBM QRadar SIEM is vulnerable to using components with known vulnerabilities Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +16 more |
| CVE-2020-4888 | 8.8 | Jan 28 | IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of… Affected: 7.3.0; 7.3.1; 7.3.1; 7.3.1; 7.3.1; 7.3.1; +20 more |
| CVE-2020-4280 | 8.8 | Oct 8 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java… Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.1; 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4272 | 8.8 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4212 | 8.8 | Jul 25 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that… Affected: 7.2.0 before 7.2.8; 7.3.0 before 7.3.2; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +14 more |
| CVE-2018-1571 | 8.8 | Sep 11 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0 through 7.2.7; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +15 more |
| CVE-2018-1418 | 8.8 | Apr 26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution Affected: 7.2.0 before 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +11 more |
| CVE-2015-2009 | 8.8 | Mar 29 | Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.x before 7.2.5 Patch 4 allows remote… Affected: 7.2.0 before 7.2.5; 7.1.0; 7.1.0; 7.1.0; 7.2.5; 7.2.5; +1 more |
| CVE-2017-1696 | 8.8 | Dec 20 | IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.3.0; 7.3.0; 7.3.0; 7.3.0; 7.3.0; 7.3.0 |
| CVE-2016-9726 | 8.8 | Mar 7 | IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2873 | 8.8 | Nov 30 | SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2016-2875 | 8.8 | Aug 8 | IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2016-9727 | 8.5 | Mar 7 | IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2026-93442 | 8.2 | Oct 20 | IBM QRadar SIEM Out-of-bounds Read Affected: 7.6.0.0 through 7.6.0.4; 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 |
| CVE-2023-50949 | 8.1 | Apr 11 | IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +3 more |
| CVE-2020-5013 | 8.1 | May 5 | IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4486 | 8.1 | Aug 11 | IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation Affected: 7.2.0 through 7.2.9 |
| CVE-2018-2024 | 8.1 | Jul 22 | IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 7.2.0; 7.3.0 |
| CVE-2019-4210 | 8.1 | Apr 8 | IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application… Affected: 7.3.2; 7.3.2 |
| CVE-2016-9724 | 8.1 | Mar 7 | IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |
| CVE-2016-2878 | 8.0 | Nov 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of… Affected: 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2025-36007 | 7.8 | Oct 27 | IBM QRadar SIEM incorrect privilege assignment Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +10 more |
| CVE-2025-33120 | 7.8 | Aug 22 | IBM QRadar SIEM privilege escalation Affected: 7.5 through 7.5.0 Update Pack 13 |
| CVE-2021-39088 | 7.8 | Jul 28 | IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2021-20401 | 7.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4932 | 7.8 | May 5 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.2; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +7 more |
| CVE-2020-4270 | 7.8 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2019-4508 | 7.8 | Jan 10 | IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker Affected: 7.3.0 through 7.3.3 |
| CVE-2016-2880 | 7.8 | Mar 1 | IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +2 more |
| CVE-2016-2879 | 7.8 | Mar 1 | IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +2 more |
| CVE-2016-2871 | 7.8 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading… Affected: through 7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +2 more |
| CVE-2020-4509 | 7.6 | Jun 4 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.3.0; 7.4.0 |
| CVE-2023-30994 | 7.5 | Oct 14 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +1 more |
| CVE-2023-26276 | 7.5 | Jun 27 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0 |
| CVE-2022-34351 | 7.5 | Feb 17 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +7 more |
| CVE-2023-22875 | 7.5 | Jan 17 | IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key Affected: 7.4.0; 7.5.0 |
| CVE-2022-22480 | 7.5 | Oct 7 | IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure Affected: 7.4.0 before 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; 7.4.3; +5 more |
| CVE-2021-29755 | 7.5 | Jul 20 | IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +15 more |
| CVE-2021-38919 | 7.5 | Apr 27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-38878 | 7.5 | Apr 27 | IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +11 more |
| CVE-2021-20400 | 7.5 | Dec 1 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +10 more |
| CVE-2021-29750 | 7.5 | Sep 15 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.3.0; 7.4.0 |
| CVE-2021-20337 | 7.5 | Jul 26 | IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 7.3.0 before 7.3.3; 7.4.0 before 7.4.3; 7.3.3; 7.3.3; 7.3.3; 7.3.3; +9 more |
| CVE-2019-4545 | 7.5 | Oct 8 | IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks Affected: 7.3.0 through 7.3.3; 7.4.0 through 7.4.1; 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2020-4269 | 7.5 | Apr 15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 7.3.0 before 7.3.3; 7.3.3; 7.3.3; 7.3.3 |
| CVE-2017-1695 | 7.5 | Feb 15 | IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.2.0 through 7.2.8; 7.3.0 through 7.3.1; 7.2.8; 7.2.8; 7.2.8; 7.2.8; +13 more |
| CVE-2017-1162 | 7.5 | Sep 12 | IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +4 more |
| CVE-2016-9738 | 7.5 | Jun 27 | IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +11 more |
| CVE-2016-9740 | 7.5 | Mar 7 | IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +3 more |