Skip to content

Known vulnerabilities in IBM QRadar SIEM

Is your version affected?

CVE Summary Score Published
CVE-2025-36051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files… 6.2 Medium Mar 19, 2026
CVE-2025-15051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium Mar 19, 2026
CVE-2026-1276 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium Mar 19, 2026
CVE-2025-36138 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting 6.4 Medium Oct 27, 2025
CVE-2025-36170 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting 6.4 Medium Oct 27, 2025
CVE-2025-36007 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to… 7.8 High Oct 27, 2025
CVE-2025-0164 IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform… 2.3 Low Sep 14, 2025
CVE-2025-36042 IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting 5.4 Medium Aug 22, 2025
CVE-2025-33120 IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a… 7.8 High Aug 22, 2025
CVE-2025-33118 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting 6.4 Medium Aug 1, 2025
CVE-2025-33097 IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting 6.4 Medium Jul 15, 2025
CVE-2025-33117 IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that… 9.1 Critical Jun 19, 2025
CVE-2025-33121 IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when… 7.1 High Jun 19, 2025
CVE-2025-36050 IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could… 6.2 Medium Jun 19, 2025
CVE-2024-56463 IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting 4.8 Medium Feb 14, 2025
CVE-2024-28786 IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could… 6.5 Medium Jan 27, 2025
CVE-2024-47107 IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting 6.4 Medium Dec 7, 2024
CVE-2024-27269 IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended… 6.8 Medium May 10, 2024
CVE-2023-50949 IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate… 5.9 Medium Apr 11, 2024
CVE-2023-50961 IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting 4.8 Medium Mar 27, 2024
CVE-2024-28784 IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting 5.4 Medium Mar 27, 2024
CVE-2023-50950 IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules 3.7 Low Jan 17, 2024
CVE-2023-47146 IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified 4.9 Medium Dec 19, 2023
CVE-2023-43041 IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific… 6.5 Medium Oct 29, 2023
CVE-2023-30994 IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… 5.4 Medium Oct 14, 2023

Other IBM products