What’s Vulnerable › Products

IBM QRadar SIEM vulnerabilities

196 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 24 published in the last 12 months.

Check whether your IBM QRadar SIEM version is affected

Exploited IBM QRadar SIEM vulnerabilities

• CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
• CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Latest IBM QRadar SIEM vulnerabilities

• CVE-2026-93442 — IBM QRadar SIEM Out-of-bounds Read (CVSS 8.2)
• CVE-2026-93441 — IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service (CVSS 8.6)
• CVE-2025-33141 — IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. (CVSS 6.5)
• CVE-2026-5522 — QRadar contains hard-coded credentials (CVSS 6.7)
• CVE-2026-13477 — IBM QRadar SIEM is vulnerable to remote code execution by privileged users (CVSS 8.8)
• CVE-2026-10025 — IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability (CVSS 9.8)
• CVE-2024-56462 — IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVSS 8.8)
• CVE-2026-1276 — IBM QRadar SIEM Cross-Site Scripting (CVSS 5.4)
• CVE-2025-36051 — IBM QRadar SIEM Information Disclosure (CVSS 5.5)
• CVE-2025-15051 — IBM QRadar SIEM Cross-Site Scripting (CVSS 5.4)
• CVE-2025-13995 — IBM QRadar SIEM Information Disclosure (CVSS 5.0)
• CVE-2024-56464 — IBM QRadar SIEM is affected by an information disclosure vulnerability (CVSS 2.7)
• CVE-2025-33119 — IBM QRadar SIEM Information Disclosure (CVSS 6.5)
• CVE-2025-36170 — IBM QRadar SIEM cross-site scripting (CVSS 5.4)
• CVE-2025-36138 — IBM QRadar SIEM cross-site scripting (CVSS 5.4)
• CVE-2025-36007 — IBM QRadar SIEM incorrect privilege assignment (CVSS 7.8)
• CVE-2025-0164 — IBM QRadar SIEM information disclosure (CVSS 2.3)
• CVE-2025-36042 — IBM QRadar SIEM cross-site scripting (CVSS 5.4)
• CVE-2025-33120 — IBM QRadar SIEM privilege escalation (CVSS 7.8)
• CVE-2025-33118 — IBM QRadar SIEM cross-site scripting (CVSS 5.4)
• CVE-2025-33097 — IBM QRadar SIEM cross-site scripting (CVSS 5.4)
• CVE-2025-36050 — IBM QRadar SIEM information disclosure (CVSS 6.2)
• CVE-2025-33121 — IBM QRadar SIEM XML external entity injection (CVSS 7.1)
• CVE-2025-33117 — IBM QRadar SIEM command execution (CVSS 9.1)
• CVE-2024-56463 — IBM QRadar SIEM cross-site scripting (CVSS 4.8)