Qradar

This hub aggregates every CVE we track for Qradar, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Qradar.

• CVE-2026-10025IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability8.2Aug 5, 2026
• CVE-2026-13477IBM QRadar SIEM is vulnerable to remote code execution by privileged users4.7Aug 5, 2026
• CVE-2024-56462IBM QRadar SIEM is vulnerable to using components with known vulnerabilities7.2May 27, 2026
• CVE-2025-13995IBM QRadar SIEM Information Disclosure5.0Mar 19, 2026
• CVE-2020-4980IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.6.5Jul 16, 2021
• CVE-2020-4294IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to...6.3Apr 15, 2020
• CVE-2020-4274IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980.5.4Apr 15, 2020
• CVE-2020-4272IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, w...8.8Apr 15, 2020
• CVE-2020-4271IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.6.3Apr 15, 2020
• CVE-2020-4268IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po...5.4Apr 15, 2020
• CVE-2020-4269IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external comp...7.5Apr 15, 2020
• CVE-2020-4270IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.7.8Apr 15, 2020
• CVE-2019-4654IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM ...4.8Apr 15, 2020
• CVE-2019-4594IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit t...5.9Apr 15, 2020
• CVE-2019-4593IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-ForceID: 167743.4.3Apr 15, 2020