CveMateVulnerability intelligence

IBM Qradar SIEM vulnerabilities, page 3

100 vulnerabilities

Known vulnerabilities in IBM Qradar SIEM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2025-36138ibmqradar_security_information_and_event_manager+111mo ago27-10-2025 18:47

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2025-36007ibmqradar_security_information_and_event_manager+111mo ago27-10-2025 18:40

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.CVE-2025-36051ibmqradar_security_information_and_event_manager+17mo ago19-03-2026 01:55

IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.CVE-2025-36050ibmqradar_security_information_and_event_manager+11y ago19-06-2025 17:13

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.CVE-2025-15051ibmqradar_security_information_and_event_manager+17mo ago19-03-2026 01:55

IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality.CVE-2025-33120ibmqradar_incident_forensics+21y ago22-08-2025 14:54

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.CVE-2025-33097ibmqradar_security_information_and_event_manager+11y ago15-07-2025 14:29

IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2025-33118ibmqradar_security_information_and_event_manager+11y ago01-08-2025 17:21

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2025-33121ibmqradar_security_information_and_event_manager+11y ago19-06-2025 17:14

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.CVE-2025-33117ibmqradar_security_information_and_event_manager+11y ago19-06-2025 17:16

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.CVE-2020-4509ibmqradar_security_information_and_event_manager+16y ago04-06-2020 13:35

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364.CVE-2020-4932ibmqradar_security_information_and_event_manager+15y ago05-05-2021 15:45

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 191748.CVE-2020-4513ibmqradar_security_information_and_event_manager+16y ago14-07-2020 13:10

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182368.CVE-2020-4883ibmqradar_security_information_and_event_manager+15y ago05-05-2021 15:45

IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force ID: 190907.CVE-2020-4979ibmqradar_security_information_and_event_manager+15y ago05-05-2021 15:45

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538.CVE-2020-4787ibmqradar_security_information_and_event_manager+15y ago27-01-2021 16:35

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.CVE-2020-4993ibmqradar_security_information_and_event_manager+15y ago05-05-2021 15:45

IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905.CVE-2020-4786ibmqradar_security_information_and_event_manager+15y ago27-01-2021 16:35

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.CVE-2020-4929ibmqradar_security_information_and_event_manager+15y ago05-05-2021 15:45

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191706.CVE-2020-4888ibmqradar_security_information_and_event_manager+15y ago28-01-2021 12:55

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.