IBM Qradar SIEM vulnerabilities, page 5

100 vulnerabilities

Known vulnerabilities in IBM Qradar SIEM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8MediumCVE-2024-27269ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM information disclosureIBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants. IBM X-Force ID: 284575.EPSS0.43%5.4MediumCVE-2024-28784ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar cross-site scriptingIBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893.EPSS0.34%6.5MediumCVE-2024-28786ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM information disclosureIBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.EPSS0.15%9.4CriticalCVE-2019-4210ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.EPSS2.25%5.3MediumCVE-2019-4559ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 166355.EPSS1.07%5.3MediumCVE-2019-4262ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.EPSS0.95%7.5HighCVE-2019-4545ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877.EPSS2.08%8.8HighCVE-2019-4212ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132.EPSS0.55%5.4MediumCVE-2019-4211ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159131.EPSS0.67%7.8HighCVE-2019-4508ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. IBM X-Force ID: 164429.EPSS0.26%4MediumCVE-2019-4054ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563.EPSS0.33%5.9MediumCVE-2019-4264ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072.EPSS1.01%5.4MediumCVE-2026-1276ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM Cross-Site ScriptingIBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.EPSS0.14%5.4MediumCVE-2023-40367ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM cross-site scriptingIBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 263376.EPSS0.37%6.5MediumCVE-2023-47146ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM information disclosureIBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified. IBM X-Force ID: 270372.EPSS0.73%6.5MediumCVE-2023-43041ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar information disclosureIBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808.EPSS0.53%7.5HighCVE-2023-30994ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar SIEM information disclosureIBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138EPSS0.25%8.1HighCVE-2023-50949ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar improper certificate validationIBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.EPSS0.34%5.4MediumCVE-2023-50961ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar cross-site scriptingIBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939.EPSS0.34%5.3MediumCVE-2023-50950ibm · qradar_security_information_and_event_manager +1 moreIBM QRadar information disclosureIBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.EPSS0.42%