IBM QRadar

• CVE-2026-93442 High 8.2 IBM QRadar SIEM Out-of-bounds Read 0.4%
• CVE-2025-33141 Medium 6.5 IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. 0.4%
• CVE-2026-5522 Medium 6.7 QRadar contains hard-coded credentials 0.1%
• CVE-2026-10025 High 8.2 IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability 0.6%
• CVE-2026-13477 Medium 4.7 IBM QRadar SIEM is vulnerable to remote code execution by privileged users 0.5%
• CVE-2024-56462 High 7.2 IBM QRadar SIEM is vulnerable to using components with known vulnerabilities 0.5%
• CVE-2025-13995 Medium 5.0 IBM QRadar SIEM Information Disclosure 0.2%
• CVE-2020-4980 Medium 5.3 IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539. 0.3%
• CVE-2020-4294 Medium 6.3 IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to ne 1.2%
• CVE-2020-4274 Medium 5.4 IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980. 0.9%
• CVE-2020-4272 Medium 5.5 IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, whic 3.0%
• CVE-2020-4271 Medium 6.3 IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897. 1.7%
• CVE-2020-4270 High 8.4 IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846. 0.5%
• CVE-2020-4269 High 7.5 IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external compone 2.0%
• CVE-2020-4268 Medium 5.4 IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten 0.6%