Ibm Qradar vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Ibm Qradar, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7MediumCVE-2026-5522ibm · qradarQRadar contains hard-coded credentialsIBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.EPSS0.12%9.8CriticalCVE-2026-10025ibm · qradar +1 moreIBM QRadar SIEM has an XML External Entity (XXE) injection vulnerabilityIBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.EPSS0.65%