| CVE-2026-93442 |
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a…
|
8.2
High
|
Oct 20, 2026 |
| CVE-2025-33141 |
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information…
|
6.5
Medium
|
Sep 18, 2026 |
| CVE-2026-5522 |
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic…
|
6.7
Medium
|
Sep 4, 2026 |
| CVE-2026-10025 |
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE)…
|
8.2
High
|
Aug 5, 2026 |
| CVE-2026-13477 |
IBM QRadar SIEM is vulnerable to remote code execution by privileged users
|
4.7
Medium
|
Aug 5, 2026 |
| CVE-2024-56462 |
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive…
|
7.2
High
|
May 27, 2026 |
| CVE-2025-13995 |
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access…
|
5.0
Medium
|
Mar 19, 2026 |
| CVE-2020-4980 |
IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host…
|
5.3
Medium
|
Jul 16, 2021 |
| CVE-2020-4294 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF)
|
6.3
Medium
|
Apr 15, 2020 |
| CVE-2020-4274 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions…
|
5.4
Medium
|
Apr 15, 2020 |
| CVE-2020-4272 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files
|
5.5
Medium
|
Apr 15, 2020 |
| CVE-2020-4271 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be…
|
6.3
Medium
|
Apr 15, 2020 |
| CVE-2020-4270 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions
|
8.4
High
|
Apr 15, 2020 |
| CVE-2020-4269 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
7.5
High
|
Apr 15, 2020 |
| CVE-2020-4268 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 15, 2020 |
| CVE-2019-4654 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an…
|
3.7
Low
|
Apr 15, 2020 |
| CVE-2019-4594 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
5.9
Medium
|
Apr 15, 2020 |
| CVE-2019-4593 |
IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in…
|
4.3
Medium
|
Apr 15, 2020 |
| CVE-2019-4581 |
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting
|
6.1
Medium
|
Nov 9, 2019 |
| CVE-2019-4509 |
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an…
|
4.3
Medium
|
Nov 9, 2019 |
| CVE-2019-4470 |
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 9, 2019 |
| CVE-2019-4454 |
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 9, 2019 |