IBM Qradar vulnerabilities
22 vulnerabilities
Known vulnerabilities in IBM Qradar, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-93442ibm · qradarIBM QRadar SIEM Out-of-bounds ReadIBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.EPSS0.30%MediumCVE-2025-13995ibm · qradar +1 moreIBM QRadar SIEM Information DisclosureIBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.EPSS0.19%MediumCVE-2025-33141ibm · qradarIBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.EPSS0.27%MediumCVE-2020-4274ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980.EPSS0.89%HighCVE-2020-4272ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID: 175898.EPSS2.98%MediumCVE-2020-4268ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841.EPSS0.56%MediumCVE-2020-4271ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.EPSS1.73%HighCVE-2020-4270ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.EPSS0.49%MediumCVE-2020-4294ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.EPSS1.24%MediumCVE-2020-4980ibm · qradar +1 moreibm qradarIBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.EPSS0.27%HighCVE-2020-4269ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845.EPSS1.96%HighCVE-2024-56462ibm · qradar +1 moreIBM QRadar SIEM is vulnerable to using components with known vulnerabilitiesIBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underlying operating system.EPSS0.46%MediumCVE-2019-4654ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-ForceID: 170965.EPSS0.37%MediumCVE-2019-4593ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-ForceID: 167743.EPSS0.82%MediumCVE-2019-4470ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163779.EPSS0.56%MediumCVE-2019-4454ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163618.EPSS0.56%MediumCVE-2019-4509ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 164430.EPSS0.71%MediumCVE-2019-4581ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167239.EPSS0.89%MediumCVE-2019-4594ibm · qradar +1 moreibm qradarIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID: 167810.EPSS0.81%HighCVE-2026-13477ibm · qradar +1 moreIBM QRadar SIEM is vulnerable to remote code execution by privileged usersIBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.EPSS0.49%