IBM Qradar Security Information And Event Manager vulnerabilities, page 3
192 vulnerabilities
Known vulnerabilities in IBM Qradar Security Information And Event Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-4930ibmqradar_security_information_and_event_manager
EPSS score2.14%
IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges by leveraging admin access.CVE-2015-4957ibmqradar_security_information_and_event_managerEPSS score0.62%
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.CVE-2015-4956ibmqradar_security_information_and_event_managerEPSS score0.85%
The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors.CVE-2015-7409ibmqradar_security_information_and_event_managerEPSS score0.62%
Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field.CVE-2015-5044ibmqradar_security_information_and_event_managerEPSS score0.54%
The Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x before 7.2.5 Patch 4 IF3 allows remote attackers to cause a denial of service via unspecified packets.CVE-2016-2875ibmqradar_security_information_and_event_managerEPSS score2.05%
IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors.CVE-2016-2881ibmqradar_security_information_and_event_managerEPSS score0.92%
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request parameters.CVE-2016-2879ibm corporationqradar siem+1EPSS score0.21%
IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference #: 1997341.CVE-2016-2876ibmqradar_security_information_and_event_managerEPSS score1.57%
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue.CVE-2016-2874ibmqradar_security_information_and_event_managerEPSS score0.61%
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors.CVE-2016-2872ibmqradar_security_information_and_event_manager+1EPSS score1.84%
Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL.CVE-2016-2877ibmqradar_security_information_and_event_managerEPSS score0.27%
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file.CVE-2016-2878ibmqradar_security_information_and_event_managerEPSS score0.48%
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.CVE-2016-2868ibmqradar_security_information_and_event_managerEPSS score0.90%
IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.CVE-2016-2873ibmqradar_security_information_and_event_managerEPSS score1.12%
SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2016-2869ibmqradar_security_information_and_event_managerEPSS score0.61%
Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL.CVE-2016-2871ibmqradar_security_information_and_event_managerEPSS score0.31%
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.CVE-2016-2880ibm corporationqradar siem+1EPSS score0.19%
IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.CVE-2016-9750ibm corporationqradar siem+1EPSS score0.82%
IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 120207.CVE-2016-9738ibmqradar_security_information_and_event_manager+1EPSS score1.61%
IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783.