Skip to content
OpenAdvisories

Product · IBM

QRadar SIEM

113 known vulnerabilities.

QRadar SIEM at a glance

Last 12 months
3
Critical · all time
3
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 3 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202630
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202530
Sep 202510
Aug 202530
Jul 202510
Jun 202531
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202510
Dec 202410

Latest advisories

  • High max 10.0
    WID-SEC-2026-2852 850 CVEs rev. 55

    Linux Kernel: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.

    Oracle IBM Red Hat SUSE amazon Linux
    first Aug 16, 2026
  • High max 9.8
    WID-SEC-2026-3042 92 CVEs rev. 45

    Linux Kernel: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, d…

    Oracle IBM Red Hat SUSE amazon Linux
    first Aug 26, 2026
  • High max 9.2
    WID-SEC-2026-3419 12 CVEs rev. 24

    Red Hat Enterprise Linux (corosync, libevent, libsoup): Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Denial-of-Service-Zustände herbeizuführen.

    Oracle IBM Red Hat SUSE Fedora Linux
    first Sep 16, 2026
  • Medium max 7.5
    WID-SEC-2026-3420 14 CVEs rev. 26

    Internet Systems Consortium BIND: Mehrere Schwachstellen

    Ein entfernter Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder Denial-of-Service-Zustände herbeizuführen.

    Oracle IBM Red Hat SUSE Fedora Linux
    first Sep 16, 2026
  • Medium max 9.8
    WID-SEC-2026-3444 602 CVEs rev. 30

    Linux Kernel: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen im Linux Kernel möglicherweise ausnutzen, um Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, den Speicher zu beschädigen, Denial-of-Service-Zustände zu verursache…

    Google Oracle IBM Red Hat SUSE Linux
    first Sep 17, 2026
All Critical High Medium Low Exploited only Public exploit

113 results · Feed

  • Medium 6.2
    CVE-2025-36051

    IBM QRadar SIEM Information Disclosure

    IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2025-15051

    IBM QRadar SIEM Cross-Site Scripting

    IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality.

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2026-1276

    IBM QRadar SIEM Cross-Site Scripting

    IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to crede…

    IBM QRadar SIEM
  • Medium 6.4
    CVE-2025-36138

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti…

    IBM QRadar SIEM
  • Medium 6.4
    CVE-2025-36170

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti…

    IBM QRadar SIEM
  • High 7.8
    CVE-2025-36007

    IBM QRadar SIEM incorrect privilege assignment

    IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

    IBM QRadar SIEM
  • Low 2.3
    CVE-2025-0164

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment.

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2025-36042

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials dis…

    IBM QRadar SIEM
  • High 7.8
    CVE-2025-33120

    IBM QRadar SIEM privilege escalation

    IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.

    IBM QRadar SIEM
  • Medium 6.4
    CVE-2025-33118

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to crede…

    IBM QRadar SIEM
  • Medium 6.4
    CVE-2025-33097

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc…

    IBM QRadar SIEM
  • Critical 9.1
    CVE-2025-33117

    IBM QRadar SIEM command execution

    IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.

    IBM QRadar SIEM
  • High 7.1
    CVE-2025-33121

    IBM QRadar SIEM XML external entity injection

    IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

    IBM QRadar SIEM
  • Medium 6.2
    CVE-2025-36050

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.

    IBM QRadar SIEM
  • Medium 4.8
    CVE-2024-56463

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses…

    IBM QRadar SIEM
  • Medium 6.5
    CVE-2024-28786

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.

    IBM QRadar SIEM
  • Medium 6.4
    CVE-2024-47107

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr…

    IBM QRadar SIEM
  • Medium 6.8
    CVE-2024-27269

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants. IBM X-Force ID: 284575.

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2023-50949

    IBM QRadar improper certificate validation

    IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.

    IBM QRadar SIEM
  • Medium 4.8
    CVE-2023-50961

    IBM QRadar cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2024-28784 Public exploit

    IBM QRadar cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-…

    IBM QRadar SIEM
  • Low 3.7
    CVE-2023-50950

    IBM QRadar information disclosure

    IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.

    IBM QRadar SIEM
  • Medium 4.9
    CVE-2023-47146

    IBM QRadar SIEM information disclosure

    IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified. IBM X-Force ID: 270372.

    IBM QRadar SIEM
  • Medium 6.5
    CVE-2023-43041

    IBM QRadar information disclosure

    IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID…

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2023-30994

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2023-40367

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM …

    IBM QRadar SIEM
  • Medium 6.7
    CVE-2022-43863

    IBM QRadar SIEM privilege escalation

    IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425.

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2022-34351

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.

    IBM QRadar SIEM
  • Medium 4.4
    CVE-2022-30613

    IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force …

    IBM QRadar SIEM
  • Medium 5.3
    CVE-2022-22480

    IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could re…

    IBM QRadar SIEM
  • High 7.4
    CVE-2021-39088

    IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unkn…

    IBM QRadar SIEM
  • Medium 5.1
    CVE-2022-22424

    IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to…

    IBM QRadar SIEM
  • Medium 4.9
    CVE-2021-38936

    IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210…

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2021-29755

    IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IB…

    IBM QRadar SIEM
  • Low 3.7
    CVE-2021-39041

    IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols no…

    IBM QRadar SIEM
  • Medium 4.8
    CVE-2022-22320

    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

    IBM QRadar SIEM
  • Medium 4.8
    CVE-2022-22345

    IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

    IBM QRadar SIEM
  • Low 3.7
    CVE-2021-38939

    IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user w…

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2021-38919

    IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Fo…

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2021-38878

    IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity a…

    IBM QRadar SIEM