# IBM QRadar SIEM.

Every CVE that names IBM QRadar SIEM among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM QRadar SIEM Information Disclosure](https://agentprime.io/advisories/CVE-2025-36051.md)
  `CVE-2025-36051` · CVE record: IBM QRadar SIEM · CVSS 6.2 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure
- [IBM QRadar SIEM Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-15051.md)
  `CVE-2025-15051` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-1276.md)
  `CVE-2026-1276` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM is affected by an information disclosure vulnerability](https://agentprime.io/advisories/CVE-2024-56464.md)
  `CVE-2024-56464` · CVE record: IBM IBM QRadar SIEM · CVSS 2.7 Low · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-548
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2025-36138.md)
  `CVE-2025-36138` · CVE record: IBM QRadar SIEM · CVSS 6.4 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2025-36170.md)
  `CVE-2025-36170` · CVE record: IBM QRadar SIEM · CVSS 6.4 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM incorrect privilege assignment](https://agentprime.io/advisories/CVE-2025-36007.md)
  `CVE-2025-36007` · CVE record: IBM QRadar SIEM · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2025 · Tags: Privilege escalation
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2025-0164.md)
  `CVE-2025-0164` · CVE record: IBM QRadar SIEM · CVSS 2.3 Low · Not analysed yet · Published 14 Sept 2025 · Tags: Broken access control
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2025-36042.md)
  `CVE-2025-36042` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 22 Aug 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM privilege escalation](https://agentprime.io/advisories/CVE-2025-33120.md)
  `CVE-2025-33120` · CVE record: IBM QRadar SIEM · CVSS 7.8 High · Not analysed yet · Published 22 Aug 2025 · Tags: Privilege escalation
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2025-33118.md)
  `CVE-2025-33118` · CVE record: IBM QRadar SIEM · CVSS 6.4 Medium · Not analysed yet · Published 1 Aug 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2025-33097.md)
  `CVE-2025-33097` · CVE record: IBM QRadar SIEM · CVSS 6.4 Medium · Not analysed yet · Published 15 Jul 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM command execution](https://agentprime.io/advisories/CVE-2025-33117.md)
  `CVE-2025-33117` · CVE record: IBM QRadar SIEM · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2025 · Tags: Path traversal
- [IBM QRadar SIEM XML external entity injection](https://agentprime.io/advisories/CVE-2025-33121.md)
  `CVE-2025-33121` · CVE record: IBM QRadar SIEM · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2025 · Tags: XML external entities (XXE)
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2025-36050.md)
  `CVE-2025-36050` · CVE record: IBM QRadar SIEM · CVSS 6.2 Medium · Not analysed yet · Published 19 Jun 2025 · Tags: Information disclosure
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2024-56463.md)
  `CVE-2024-56463` · CVE record: IBM QRadar SIEM · CVSS 4.8 Medium · Not analysed yet · Published 14 Feb 2025 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2024-28786.md)
  `CVE-2024-28786` · CVE record: IBM QRadar SIEM · CVSS 6.5 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: Weak cryptography or TLS
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2024-47107.md)
  `CVE-2024-47107` · CVE record: IBM QRadar SIEM · CVSS 6.4 Medium · Not analysed yet · Published 7 Dec 2024 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2024-27269.md)
  `CVE-2024-27269` · CVE record: IBM QRadar SIEM · CVSS 6.8 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-286
- [IBM QRadar improper certificate validation](https://agentprime.io/advisories/CVE-2023-50949.md)
  `CVE-2023-50949` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: Weak cryptography or TLS
- [IBM QRadar cross-site scripting](https://agentprime.io/advisories/CVE-2023-50961.md)
  `CVE-2023-50961` · CVE record: IBM QRadar SIEM · CVSS 4.8 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS)
- [IBM QRadar cross-site scripting](https://agentprime.io/advisories/CVE-2024-28784.md)
  `CVE-2024-28784` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS)
- [IBM QRadar information disclosure](https://agentprime.io/advisories/CVE-2023-50950.md)
  `CVE-2023-50950` · CVE record: IBM QRadar SIEM · CVSS 3.7 Low · Not analysed yet · Published 17 Jan 2024 · Tags: Information disclosure
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2023-47146.md)
  `CVE-2023-47146` · CVE record: IBM QRadar SIEM · CVSS 4.9 Medium · Not analysed yet · Published 19 Dec 2023 · Tags: Information disclosure
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2023-43057.md)
  `CVE-2023-43057` · CVE record: IBM IBM QRadar SIEM · CVSS 4.6 Medium · Not analysed yet · Published 11 Nov 2023 · Tags: Cross-site scripting (XSS)
- [IBM QRadar information disclosure](https://agentprime.io/advisories/CVE-2023-43041.md)
  `CVE-2023-43041` · CVE record: IBM QRadar SIEM · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2023 · Tags: Information disclosure
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2023-30994.md)
  `CVE-2023-30994` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2023 · Tags: Weak cryptography or TLS
- [IBM QRadar SIEM cross-site scripting](https://agentprime.io/advisories/CVE-2023-40367.md)
  `CVE-2023-40367` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2023 · Tags: Cross-site scripting (XSS)
- [IBM QRadar SIEM privilege escalation](https://agentprime.io/advisories/CVE-2022-43863.md)
  `CVE-2022-43863` · CVE record: IBM QRadar SIEM · CVSS 6.7 Medium · Not analysed yet · Published 22 Mar 2023 · Tags: CWE-20
- [IBM QRadar SIEM information disclosure](https://agentprime.io/advisories/CVE-2022-34351.md)
  `CVE-2022-34351` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2023 · Tags: Information disclosure
- [IBM QRadar SIEM: IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a…](https://agentprime.io/advisories/CVE-2022-30613.md)
  `CVE-2022-30613` · CVE record: IBM QRadar SIEM · CVSS 4.4 Medium · Not analysed yet · Published 7 Oct 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using…](https://agentprime.io/advisories/CVE-2022-22480.md)
  `CVE-2022-22480` · CVE record: IBM QRadar SIEM · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this…](https://agentprime.io/advisories/CVE-2021-39088.md)
  `CVE-2021-39088` · CVE record: IBM QRadar SIEM · CVSS 7.4 High · Not analysed yet · Published 28 Jul 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive…](https://agentprime.io/advisories/CVE-2022-22424.md)
  `CVE-2022-22424` · CVE record: IBM QRadar SIEM · CVSS 5.1 Medium · Not analysed yet · Published 20 Jul 2022
- [IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user.](https://agentprime.io/advisories/CVE-2021-38936.md)
  `CVE-2021-38936` · CVE record: IBM QRadar SIEM · CVSS 4.9 Medium · Not analysed yet · Published 20 Jul 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some…](https://agentprime.io/advisories/CVE-2021-29755.md)
  `CVE-2021-29755` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack…](https://agentprime.io/advisories/CVE-2021-39041.md)
  `CVE-2021-39041` · CVE record: IBM QRadar SIEM · CVSS 3.7 Low · Not analysed yet · Published 12 Jul 2022
- [IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22320.md)
  `CVE-2022-22320` · CVE record: IBM QRadar SIEM · CVSS 4.8 Medium · Not analysed yet · Published 11 May 2022
- [IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22345.md)
  `CVE-2022-22345` · CVE record: IBM QRadar SIEM · CVSS 4.8 Medium · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files…](https://agentprime.io/advisories/CVE-2021-38939.md)
  `CVE-2021-38939` · CVE record: IBM QRadar SIEM · CVSS 3.7 Low · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens…](https://agentprime.io/advisories/CVE-2021-38919.md)
  `CVE-2021-38919` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication.](https://agentprime.io/advisories/CVE-2021-38878.md)
  `CVE-2021-38878` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant…](https://agentprime.io/advisories/CVE-2021-38874.md)
  `CVE-2021-38874` · CVE record: IBM QRadar SIEM · CVSS 4.3 Medium · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out…](https://agentprime.io/advisories/CVE-2021-38869.md)
  `CVE-2021-38869` · CVE record: IBM QRadar SIEM · CVSS 4.3 Medium · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive…](https://agentprime.io/advisories/CVE-2021-29776.md)
  `CVE-2021-29776` · CVE record: IBM QRadar SIEM · CVSS 3.1 Low · Not analysed yet · Published 27 Apr 2022
- [IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-29863.md)
  `CVE-2021-29863` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2021
- [IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29849.md)
  `CVE-2021-29849` · CVE record: IBM QRadar SIEM · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due…](https://agentprime.io/advisories/CVE-2021-29779.md)
  `CVE-2021-29779` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could…](https://agentprime.io/advisories/CVE-2021-20400.md)
  `CVE-2021-20400` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could…](https://agentprime.io/advisories/CVE-2021-29750.md)
  `CVE-2021-29750` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be…](https://agentprime.io/advisories/CVE-2021-29880.md)
  `CVE-2021-29880` · CVE record: IBM QRadar SIEM · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2021
- [IBM QRadar SIEM: IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML…](https://agentprime.io/advisories/CVE-2021-20399.md)
  `CVE-2021-20399` · CVE record: IBM QRadar SIEM · CVSS 7.1 High · Not analysed yet · Published 27 Jul 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected…](https://agentprime.io/advisories/CVE-2021-20337.md)
  `CVE-2021-20337` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 26 Jul 2021
- [IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy.](https://agentprime.io/advisories/CVE-2021-20429.md)
  `CVE-2021-20429` · CVE record: IBM QRadar SIEM · CVSS 3.7 Low · Not analysed yet · Published 14 May 2021
- [IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2021-20393.md)
  `CVE-2021-20393` · CVE record: IBM QRadar SIEM · CVSS 5.3 Medium · Not analysed yet · Published 14 May 2021
- [IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20392.md)
  `CVE-2021-20392` · CVE record: IBM QRadar SIEM · CVSS 6.1 Medium · Not analysed yet · Published 14 May 2021
- [IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system.](https://agentprime.io/advisories/CVE-2021-20391.md)
  `CVE-2021-20391` · CVE record: IBM QRadar SIEM · CVSS 4.0 Medium · Not analysed yet · Published 14 May 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials…](https://agentprime.io/advisories/CVE-2021-20401.md)
  `CVE-2021-20401` · CVE record: IBM QRadar SIEM · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2021
- [IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20397.md)
  `CVE-2021-20397` · CVE record: IBM QRadar SIEM · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2021
- [IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE)…](https://agentprime.io/advisories/CVE-2020-5013.md)
  `CVE-2020-5013` · CVE record: IBM QRadar SIEM · CVSS 7.1 High · Not analysed yet · Published 5 May 2021

Older: <https://agentprime.io/advisories/technology/ibm-qradar-siem.md?cursor=WyIyMDIxLTA1LTA1VDE1OjQ1OjM0LjA0MjAwMFoiLCJDVkUtMjAyMC01MDEzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-qradar-siem>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-qradar-siem/>. Everything for agents: <https://agentprime.io/llms.txt>.