📦 Qradar Security Information And Event Manager

by Ibm

🔍 What is Qradar Security Information And Event Manager?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-33117

CRITICAL CVSS 9.1 Jun 19, 2025

This vulnerability in IBM QRadar SIEM allows privileged users to modify configuration files, enabling them to upload malicious autoupdate files that execute arbitrary commands. This affects IBM QRadar...

CVE-2021-38869

CRITICAL CVSS 9.8 Apr 27, 2022

IBM QRadar SIEM fails to automatically log users out after exceeding idle timeout in certain situations, allowing unauthorized session persistence. This affects IBM QRadar SIEM versions 7.3, 7.4, and ...

CVE-2021-20399

CRITICAL CVSS 9.1 Jul 27, 2021

This XXE vulnerability in IBM QRadar SIEM allows remote attackers to read sensitive files from the server or cause denial of service through memory exhaustion. It affects QRadar SIEM versions 7.3.0 th...

CVE-2020-4979

CRITICAL CVSS 9.8 May 5, 2021

CVE-2020-4979 is a critical vulnerability in IBM QRadar SIEM that allows attackers to execute arbitrary commands by compromising or spoofing inter-host communication. This affects organizations using ...

CVE-2025-36007

HIGH CVSS 7.8 Oct 27, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 contain a privilege escalation vulnerability due to improper privilege assignment in an update script. This allows authenti...

CVE-2025-33120

HIGH CVSS 7.8 Aug 22, 2025

CVE-2025-33120 is a privilege escalation vulnerability in IBM QRadar SIEM where authenticated users can gain elevated privileges through a misconfigured cronjob that runs with unnecessary privileges. ...

CVE-2021-39088

HIGH CVSS 7.8 Jul 28, 2022

CVE-2021-39088 is a local privilege escalation vulnerability in IBM QRadar SIEM that allows authenticated local users to elevate their privileges to root/admin level. This affects IBM QRadar SIEM vers...

CVE-2021-29755

HIGH CVSS 7.5 Jul 20, 2022

IBM QRadar SIEM versions 7.3, 7.4, and 7.5 fail to properly validate SSL/TLS certificates for some inter-host communications. This allows attackers to perform man-in-the-middle attacks and intercept o...

CVE-2021-38878

HIGH CVSS 7.5 Apr 27, 2022

This vulnerability in IBM QRadar allows an attacker to impersonate legitimate users or systems due to insufficient authentication during key exchange. It affects IBM QRadar versions 7.3, 7.4, and 7.5....

CVE-2021-20400

HIGH CVSS 7.5 Dec 1, 2021

CVE-2021-20400 is a cryptographic weakness vulnerability in IBM QRadar SIEM where the software uses weaker-than-expected encryption algorithms. This allows attackers to potentially decrypt sensitive i...

CVE-2021-29750

HIGH CVSS 7.5 Sep 15, 2021

IBM QRadar SIEM versions 7.3 and 7.4 use weak cryptographic algorithms that could allow attackers to decrypt sensitive information. This affects organizations using these specific QRadar versions for ...

CVE-2021-20337

HIGH CVSS 7.5 Jul 26, 2021

IBM QRadar SIEM versions 7.3.0-7.3.3 Patch 8 and 7.4.0-7.4.3 GA use weak cryptographic algorithms, allowing attackers to decrypt sensitive information stored or transmitted by the system. This affects...

CVE-2020-4932

HIGH CVSS 7.8 May 5, 2021

IBM QRadar SIEM versions 7.3 and 7.4 contain hard-coded credentials that could allow attackers to authenticate to the system, communicate with external components, or decrypt internal data. This affec...

CVE-2020-5013

HIGH CVSS 8.1 May 5, 2021

IBM QRadar SIEM versions 7.3 and 7.4 contain an XML External Entity (XXE) vulnerability that allows remote attackers to read sensitive files from the server or cause denial of service through resource...

CVE-2021-20401

HIGH CVSS 7.8 May 5, 2021

IBM QRadar SIEM versions 7.3 and 7.4 contain hard-coded credentials that could allow attackers to authenticate to the system, communicate with external components, or decrypt internal data. This affec...

CVE-2025-33119

MEDIUM CVSS 6.5 Nov 12, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 UP14 store user credentials in configuration files that are committed to source control. This allows authenticated users to read sensitive credentials, poten...

CVE-2025-36170

MEDIUM CVSS 6.4 Oct 27, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 contain a stored cross-site scripting vulnerability. Authenticated users can inject malicious JavaScript into the web inter...

CVE-2025-33097

MEDIUM CVSS 6.4 Jul 15, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 UP12 IF02 contain a stored cross-site scripting vulnerability that allows authenticated users to inject malicious JavaScript into the web interface. This cou...

CVE-2025-36050

MEDIUM CVSS 6.2 Jun 19, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 store sensitive information in log files that local users can read. This information disclosure vulnerability could expose credentials, con...

CVE-2024-56463

MEDIUM CVSS 4.8 Feb 14, 2025

IBM QRadar SIEM 7.5 contains a cross-site scripting vulnerability that allows privileged users to inject malicious JavaScript into the web interface. This could enable attackers to steal credentials o...

CVE-2024-47107

MEDIUM CVSS 6.4 Dec 7, 2024

IBM QRadar SIEM 7.5 has a stored cross-site scripting (XSS) vulnerability that allows authenticated users to inject malicious JavaScript into the web interface. This could enable attackers to steal se...

CVE-2024-27269

MEDIUM CVSS 6.8 May 14, 2024

This vulnerability in IBM QRadar SIEM 7.5 allows privileged users to configure user management settings that could unintentionally expose sensitive information across different tenants. The issue affe...

CVE-2024-56464

LOW CVSS 2.7 Dec 9, 2025

IBM QRadar SIEM versions 7.5 through 7.5.0 UP14 IF01 have an information disclosure vulnerability that exposes directory information. This could allow attackers to discover internal file structures an...