IBM QRadar
22 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93442 | 7.6.0.0 – 7.6.0.4 ; 7.5.0 – 7.5.0 Update Package 16 Interim Fix 001 | IBM QRadar SIEM Out-of-bounds Read | HIGH 8.2 | 0.4 % | ||
| CVE-2025-33141 | 7.5.0 – 7.5.0 UP15 Interim Fix 006 | IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-5522 | 7.5.0 – 7.5.0 UP15 Interim Fix 005 | QRadar contains hard-coded credentials | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-10025 | 7.6.0.0 – 7.6.0.1 ; 7.5.0 – 7.5.0 UP 15 Interim Fix 005 | IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-13477 | 7.6.0.0 – 7.6.0.1 ; 7.5.0 – 7.5.0 UP 15 Interim Fix 005 | IBM QRadar SIEM is vulnerable to remote code execution by privileged users | HIGH 8.8 | 0.5 % | ||
| CVE-2024-56462 | 7.5.0 – 7.5.0 UP15 Interim Fix 002 | IBM QRadar SIEM is vulnerable to using components with known vulnerabilities | HIGH 8.8 | 0.5 % | ||
| CVE-2025-13995 | 7.5.0 – 7.5.0 Update Pack 14 | IBM QRadar SIEM Information Disclosure | MEDIUM 5.0 | 0.2 % | ||
| CVE-2020-4980 | 7.3 ; 7.4 | IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabl | MEDIUM 6.5 | 0.3 % | ||
| CVE-2020-4294 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unau | MEDIUM 6.3 | 1.2 % | ||
| CVE-2020-4274 | 7.3.0 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permis | MEDIUM 5.4 | 0.9 % | ||
| CVE-2020-4272 | 7.3.0 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted | HIGH 8.8 | 3.0 % | ||
| CVE-2020-4271 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower p | MEDIUM 6.3 | 1.7 % | ||
| CVE-2020-4270 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846. | HIGH 8.4 | 0.5 % | ||
| CVE-2020-4269 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun | HIGH 7.5 | 2.0 % | ||
| CVE-2020-4268 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-4654 | 7.3.3.Patch2 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a truste | MEDIUM 4.8 | 0.4 % | ||
| CVE-2019-4594 | 7.3.0 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HT | MEDIUM 5.9 | 0.8 % | ||
| CVE-2019-4593 | 7.3.3.Patch1 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks again | MEDIUM 4.3 | 0.8 % | ||
| CVE-2019-4581 | 7.3.0 ; 7.3.2Patch4 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 6.1 | 0.9 % | ||
| CVE-2019-4509 | 7.3.0 ; 7.3.2Patch4 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obt | MEDIUM 4.3 | 0.7 % | ||
| CVE-2019-4470 | 7.3.0 ; 7.3.2Patch4 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-4454 | 7.3.0 ; 7.3.2Patch4 | IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.6 % |