Advisories · Technology

IBM QRadar SIEM.

Every CVE that names IBM QRadar SIEM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36051 CVE record

CVSS 6.2 Medium

IBM QRadar SIEM Information Disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 19 Mar 2026
CVE-2025-15051 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM Cross-Site Scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2026-1276 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM Cross-Site Scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2024-56464 CVE record

CVSS 2.7 Low

IBM QRadar SIEM is affected by an information disclosure vulnerability
- IBM QRadar SIEM
- CWE-548
Not analysed yet 9 Dec 2025
CVE-2025-36138 CVE record

CVSS 6.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025
CVE-2025-36170 CVE record

CVSS 6.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025
CVE-2025-36007 CVE record

CVSS 7.8 High

IBM QRadar SIEM incorrect privilege assignment
- IBM QRadar SIEM
- Privilege escalation
Not analysed yet 27 Oct 2025
CVE-2025-0164 CVE record

CVSS 2.3 Low

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Broken access control
Not analysed yet 14 Sept 2025
CVE-2025-36042 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2025
CVE-2025-33120 CVE record

CVSS 7.8 High

IBM QRadar SIEM privilege escalation
- IBM QRadar SIEM
- Privilege escalation
Not analysed yet 22 Aug 2025
CVE-2025-33118 CVE record

CVSS 6.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2025
CVE-2025-33097 CVE record

CVSS 6.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 15 Jul 2025
CVE-2025-33117 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM QRadar SIEM command execution
- IBM QRadar SIEM
- Path traversal
Not analysed yet 19 Jun 2025
CVE-2025-33121 CVE record

CVSS 7.1 High

IBM QRadar SIEM XML external entity injection
- IBM QRadar SIEM
- XML external entities (XXE)
Not analysed yet 19 Jun 2025
CVE-2025-36050 CVE record

CVSS 6.2 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 19 Jun 2025
CVE-2024-56463 CVE record

CVSS 4.8 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2025
CVE-2024-28786 CVE record

CVSS 6.5 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Weak cryptography or TLS
Not analysed yet 27 Jan 2025
CVE-2024-47107 CVE record

CVSS 6.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 7 Dec 2024
CVE-2024-27269 CVE record

CVSS 6.8 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- CWE-286
Not analysed yet 10 May 2024
CVE-2023-50949 CVE record

CVSS 5.9 Medium

IBM QRadar improper certificate validation
- IBM QRadar SIEM
- Weak cryptography or TLS
Not analysed yet 11 Apr 2024
CVE-2023-50961 CVE record

CVSS 4.8 Medium

IBM QRadar cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2024-28784 CVE record

CVSS 5.4 Medium

IBM QRadar cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2023-50950 CVE record

CVSS 3.7 Low

IBM QRadar information disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 17 Jan 2024
CVE-2023-47146 CVE record

CVSS 4.9 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 19 Dec 2023
CVE-2023-43057 CVE record

CVSS 4.6 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2023
CVE-2023-43041 CVE record

CVSS 6.5 Medium

IBM QRadar information disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 29 Oct 2023
CVE-2023-30994 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Weak cryptography or TLS
Not analysed yet 14 Oct 2023
CVE-2023-40367 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM cross-site scripting
- IBM QRadar SIEM
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2023
CVE-2022-43863 CVE record

CVSS 6.7 Medium

IBM QRadar SIEM privilege escalation
- IBM QRadar SIEM
- CWE-20
Not analysed yet 22 Mar 2023
CVE-2022-34351 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM information disclosure
- IBM QRadar SIEM
- Information disclosure
Not analysed yet 17 Feb 2023
CVE-2022-30613 CVE record

CVSS 4.4 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a…
- IBM QRadar SIEM
Not analysed yet 7 Oct 2022
CVE-2022-22480 CVE record

CVSS 5.3 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using…
- IBM QRadar SIEM
Not analysed yet 7 Oct 2022
CVE-2021-39088 CVE record

CVSS 7.4 High

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this…
- IBM QRadar SIEM
Not analysed yet 28 Jul 2022
CVE-2022-22424 CVE record

CVSS 5.1 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive…
- IBM QRadar SIEM
Not analysed yet 20 Jul 2022
CVE-2021-38936 CVE record

CVSS 4.9 Medium

IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user.
- IBM QRadar SIEM
Not analysed yet 20 Jul 2022
CVE-2021-29755 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some…
- IBM QRadar SIEM
Not analysed yet 20 Jul 2022
CVE-2021-39041 CVE record

CVSS 3.7 Low

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack…
- IBM QRadar SIEM
Not analysed yet 12 Jul 2022
CVE-2022-22320 CVE record

CVSS 4.8 Medium

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
- IBM QRadar SIEM
Not analysed yet 11 May 2022
CVE-2022-22345 CVE record

CVSS 4.8 Medium

IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting.
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-38939 CVE record

CVSS 3.7 Low

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files…
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-38919 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens…
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-38878 CVE record

CVSS 5.9 Medium

IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication.
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-38874 CVE record

CVSS 4.3 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant…
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-38869 CVE record

CVSS 4.3 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out…
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-29776 CVE record

CVSS 3.1 Low

IBM QRadar SIEM: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive…
- IBM QRadar SIEM
Not analysed yet 27 Apr 2022
CVE-2021-29863 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF).
- IBM QRadar SIEM
Not analysed yet 1 Dec 2021
CVE-2021-29849 CVE record

CVSS 5.4 Medium

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
- IBM QRadar SIEM
Not analysed yet 1 Dec 2021
CVE-2021-29779 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due…
- IBM QRadar SIEM
Not analysed yet 1 Dec 2021
CVE-2021-20400 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could…
- IBM QRadar SIEM
Not analysed yet 1 Dec 2021
CVE-2021-29750 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could…
- IBM QRadar SIEM
Not analysed yet 15 Sept 2021
CVE-2021-29880 CVE record

CVSS 5.3 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be…
- IBM QRadar SIEM
Not analysed yet 13 Aug 2021
CVE-2021-20399 CVE record

CVSS 7.1 High

IBM QRadar SIEM: IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML…
- IBM QRadar SIEM
Not analysed yet 27 Jul 2021
CVE-2021-20337 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected…
- IBM QRadar SIEM
Not analysed yet 26 Jul 2021
CVE-2021-20429 CVE record

CVSS 3.7 Low

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy.
- IBM QRadar SIEM
Not analysed yet 14 May 2021
CVE-2021-20393 CVE record

CVSS 5.3 Medium

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
- IBM QRadar SIEM
Not analysed yet 14 May 2021
CVE-2021-20392 CVE record

CVSS 6.1 Medium

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting.
- IBM QRadar SIEM
Not analysed yet 14 May 2021
CVE-2021-20391 CVE record

CVSS 4.0 Medium

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system.
- IBM QRadar SIEM
Not analysed yet 14 May 2021
CVE-2021-20401 CVE record

CVSS 5.9 Medium

IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials…
- IBM QRadar SIEM
Not analysed yet 5 May 2021
CVE-2021-20397 CVE record

CVSS 6.1 Medium

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
- IBM QRadar SIEM
Not analysed yet 5 May 2021
CVE-2020-5013 CVE record

CVSS 7.1 High

IBM QRadar SIEM: IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE)…
- IBM QRadar SIEM
Not analysed yet 5 May 2021