IBM Qradar Siem

IBM QRadar SIEM 7.5-7.5.0 Update Pack 13: Stored XSS in Web UI
CVE-2025-36138 6.4 - Medium - October 27, 2025

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

XSS

Stored XSS in IBM QRadar SIEM 7.5 Update Pack 13 (pre-fix)
CVE-2025-36170 6.4 - Medium - October 27, 2025

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

XSS

IBM QRadar SIEM 7.5.0 Rogue Privilege Escalation via Update Script
CVE-2025-36007 7.8 - High - October 27, 2025

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

Incorrect Privilege Assignment

IBM QRadar SIEM 7.5 XSS Vulnerability Allows Arbitrary JS Injection
CVE-2024-28784 5.4 - Medium - March 27, 2024

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893.

XSS

QRadar SIEM 7.5.0 Authenticated Input Validation Remote Issue
CVE-2023-26273 4.3 - Medium - June 27, 2023

IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 248134.

Improper Input Validation

IBM QRadar SIEM 7.3-7.5 Local Priv Esc Vulnerability
CVE-2021-39088 7.8 - High - July 28, 2022

IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111.

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms
CVE-2021-20400 - December 01, 2021

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074.

IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
CVE-2021-20399 - July 27, 2021

IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073.

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms
CVE-2021-20337 - July 26, 2021

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 194448.

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy
CVE-2021-20429 - May 14, 2021

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could
CVE-2021-20393 - May 14, 2021

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001.

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting
CVE-2021-20392 - May 14, 2021

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0
CVE-2021-20391 - May 14, 2021

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting
CVE-2021-20397 - May 05, 2021

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017.

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key
CVE-2021-20401 - May 05, 2021

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure
CVE-2018-1725 - November 05, 2020

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440.

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way
CVE-2018-2024 - July 22, 2019

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350.

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting
CVE-2018-2021 - July 17, 2019

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155345.

IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users
CVE-2018-2022 - July 17, 2019

IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 155346.

IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users
CVE-2018-1729 - April 19, 2019

IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147708.

IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax
CVE-2018-1733 - January 29, 2019

IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could allow an attacker to modify displayed content. IBM X-Force ID: 147811.

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
CVE-2018-1730 - December 05, 2018

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147709.

IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users
CVE-2018-1732 - December 05, 2018

IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147810.

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting
CVE-2018-1728 - December 05, 2018

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147707.

IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could
CVE-2018-1650 - December 05, 2018

IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication configured by the administrator. IBM X-Force ID: 144656.

IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system
CVE-2018-1568 - December 05, 2018

IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate
CVE-2017-1622 - December 05, 2018

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.

IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system
CVE-2018-1571 - September 11, 2018

IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 143121.

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could
CVE-2018-1612 - July 17, 2018

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164.