IBM Qradar SIEM vulnerabilities, page 4
100 vulnerabilities
Known vulnerabilities in IBM Qradar SIEM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-4789ibmqradar_security_information_and_event_manager+1
EPSS score2.58%
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.CVE-2020-4512ibmqradar_security_information_and_event_manager+1EPSS score2.02%
IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.CVE-2020-4511ibmqradar_security_information_and_event_manager+1EPSS score1.14%
IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command. IBM X-Force ID: 182366.CVE-2020-4364ibmqradar_security_information_and_event_manager+1EPSS score0.56%
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178961.CVE-2020-4151ibmqradar_security_information_and_event_manager+1EPSS score1.08%
IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. IBM X-Force ID: 174201.CVE-2020-4280ibmqradar_security_information_and_event_manager+1EPSS score72.97%
IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.CVE-2020-4510ibmqradar_security_information_and_event_manager+1EPSS score1.99%
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182365.CVE-2020-5013ibmqradar_security_information_and_event_manager+1EPSS score1.47%
IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.CVE-2020-5032ibmqradar_security_information_and_event_manager+1EPSS score0.52%
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.CVE-2022-43863ibmqradar_security_information_and_event_manager+1EPSS score0.74%
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425.CVE-2022-22424ibmqradar_security_information_and_event_manager+1EPSS score0.18%
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.CVE-2022-22480ibmqradar_security_information_and_event_manager+1EPSS score0.85%
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.CVE-2022-22345ibmqradar_security_information_and_event_manager+1EPSS score1.84%
IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220041.CVE-2022-22320ibmqradar_security_information_and_event_manager+1EPSS score0.47%
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367.CVE-2022-30613ibmqradar_security_information_and_event_manager+1EPSS score0.20%
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366.CVE-2022-34351ibmqradar_security_information_and_event_manager+1EPSS score0.39%
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.CVE-2017-1695ibmqradar_security_information_and_event_manager+1EPSS score1.32%
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.CVE-2017-1622ibmqradar_incident_forensics+1EPSS score0.64%
IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.CVE-2024-47107ibmqradar_security_information_and_event_manager+1EPSS score0.23%
IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2024-56463ibmqradar_security_information_and_event_manager+1EPSS score0.23%
IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.