Advisories · Technology

IBM QRadar.

Every CVE that names IBM QRadar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93442 CVE record

CVSS 8.2 High

IBM QRadar SIEM Out-of-bounds Read
- IBM QRadar
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2025-33141 CVE record

CVSS 6.5 Medium

IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
- IBM QRadar
- Information disclosure
Not analysed yet 18 Sept 2026
CVE-2026-5522 CVE record

CVSS 6.7 Medium

QRadar contains hard-coded credentials
- IBM QRadar
- Hard-coded credentials
Not analysed yet 4 Sept 2026
CVE-2026-10025 CVE record

CVSS 8.2 High

IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
- IBM QRadar
- XML external entities (XXE)
Not analysed yet 5 Aug 2026
CVE-2026-13477 CVE record

CVSS 4.7 Medium

IBM QRadar SIEM is vulnerable to remote code execution by privileged users
- IBM QRadar
- Command injection
Not analysed yet 5 Aug 2026
CVE-2024-56462 CVE record

CVSS 7.2 High

IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
- IBM QRadar
- CWE-530
Not analysed yet 27 May 2026
CVE-2025-13995 CVE record

CVSS 5.0 Medium

IBM QRadar SIEM Information Disclosure
- IBM QRadar
- CWE-1286
Not analysed yet 19 Mar 2026
CVE-2020-4980 CVE record

CVSS 5.3 Medium

IBM QRadar: IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit…
- IBM QRadar
Not analysed yet 16 Jul 2021
CVE-2020-4294 CVE record

CVSS 6.3 Medium

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF).
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2020-4274 CVE record

CVSS 5.4 Medium

IBM QRadar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and…
- IBM QRadar
Not analysed yet 15 Apr 2020
CVE-2020-4272 CVE record

CVSS 5.5 Medium

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files.
- IBM QRadar
Not analysed yet 15 Apr 2020
CVE-2020-4271 CVE record

CVSS 6.3 Medium

IBM Qradar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially…
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2020-4270 CVE record

CVSS 8.4 High

IBM Qradar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges…
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2020-4269 CVE record

CVSS 7.5 High

IBM Qradar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials…
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2020-4268 CVE record

CVSS 5.4 Medium

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting.
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2019-4654 CVE record

CVSS 3.7 Low

IBM Qradar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates…
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2019-4594 CVE record

CVSS 5.9 Medium

IBM QRadar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive…
- IBM QRadar
Not analysed yet 15 Apr 2020
CVE-2019-4593 CVE record

CVSS 4.3 Medium

IBM Qradar: IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive…
- IBM Qradar
Not analysed yet 15 Apr 2020
CVE-2019-4581 CVE record

CVSS 6.1 Medium

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.
- IBM QRadar
Not analysed yet 9 Nov 2019
CVE-2019-4509 CVE record

CVSS 4.3 Medium

IBM QRadar: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some…
- IBM QRadar
Not analysed yet 9 Nov 2019
CVE-2019-4470 CVE record

CVSS 5.4 Medium

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.
- IBM QRadar
Not analysed yet 9 Nov 2019
CVE-2019-4454 CVE record

CVSS 5.4 Medium

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.
- IBM QRadar
Not analysed yet 9 Nov 2019