QRadar SIEM vulnerabilities

7 known vulnerabilities in QRadar SIEM from IBM. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  QRadar SIEM: Incorrect Privilege Assignment

  CVE-2025-36007Oct 27, 2025IBM

  IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

• 7.8 High severity

  QRadar SIEM: Execution with Unnecessary Privileges

  CVE-2025-33120Aug 22, 2025IBM

  IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.

• 7.1 High severity

  QRadar SIEM: Improper Restriction of XML External Entity Reference

  CVE-2025-33121Jun 19, 2025IBM

  IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

• 9.1 Critical severity

  QRadar SIEM: External Control of File Name or Path

  CVE-2025-33117Jun 19, 2025IBM

  IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.

• 7.5 High severity

  QRadar SIEM: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2023-30994Oct 14, 2023IBM

  IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138

• 7.2 High severity

  QRadar SIEM: Improper Privilege Management

  CVE-2022-43863Mar 22, 2023IBM

  IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425.

• 7.5 High severity

  QRadar SIEM: Cleartext Storage of Sensitive Information

  CVE-2022-34351Feb 17, 2023IBM

  IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.