CVE-2021-20397

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017...

CVE-2020-5013

CVE-2020-5013 affects IBM QRadar SIEM 7.3.x (7.3.0–7.3.3 Patch 7) and 7.4.x (7.4.0–7.4.2 Patch 2). The issue is an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to potentially disclose sensitive information or exhaust memory/CPU resources. Mitigations/Re...

CVE-2020-5013

IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245...

CVE-2021-20397

IBM QRadar SIEM versions 7.3.x and 7.4.x are affected by a Cross‑Site Scripting (XSS) vulnerability (CVE-2021-20397). The issue allows embedding arbitrary JavaScript in the Web UI, potentially exposing credentials within a trusted session. Affected products/versions: 7.3.0–7.3.3 Patch 7 and 7.4.0...

CVE-2020-4993

CVE-2020-4993 – IBM QRadar SIEM path traversal : QRadar SIEM versions 7.3.0–7.3.3 Patch 7 and 7.4.0–7.4.2 Patch 2 are vulnerable when decompressing or verifying the signature of ZIP files. The root cause is improper handling during ZIP data processing, enabling path traversal. Basescore 4.9 (CVSS...

CVE-2020-4993

IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905...

CVE-2020-4979

CVE-2020-4979 affects IBM QRadar SIEM 7.3.x and 7.4.x, where insecure inter‑deployment communication can enable an attacker who can compromise or spoof traffic between hosts to execute arbitrary commands. Root cause is insecure inter‑deployment communications between QRadar components. Impact is ...

CVE-2020-4979

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538...

CVE-2020-4929

IBM QRadar SIEM is affected by CVE-2020-4929, a Cross-Site Scripting (XSS) vulnerability in the Web UI. Affected versions include QRadar 7.3.0–7.3.3 Patch 7 and 7.4.0–7.4.2 Patch 2. The underlying issue permits embedding arbitrary JavaScript in the Web UI, with potential credential disclosure wit...

CVE-2020-4932

CVE-2020-4932 affects IBM QRadar SIEM 7.3.x and 7.4.x. Root cause: hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. Impact: potential disclosure or misuse of embedded credentials. Affected versions per sources: QRadar 7.3.0–7.3.3 Patch 7...

CVE-2020-4932

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 191748...

CVE-2020-4929

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191706...

CVE-2020-4883

IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force ID: 190907...

CVE-2020-4883

IBM QRadar SIEM is affected by CVE-2020-4883 (Information Disclosure/Cross-domain). The vulnerability exists in QRadar 7.3.0–7.3.3 Patch 7 and 7.4.0–7.4.2 Patch 2, enabling disclosure of sensitive information about other domains. Root cause: cross-domain information disclosure in the product’s ha...

Security Bulletin: Apache Tomcat as used by IBM QRadar SIEM is vulnerable to information disclosure (CVE-2020-13943)

Summary Apache Tomcat as used by IBM QRadar SIEM is vulnerable to information disclosure Vulnerability Details CVEID: CVE-2020-13943 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when HTTP/2 client exceeded the agreed maximum number of...

Security Bulletin: IBM QRadar SIEM is vulnerable to Cross domain information disclosure (CVE-2020-4883)

Summary IBM QRadar SIEM is vulnerable to Cross domain information disclosure Vulnerability Details CVEID: CVE-2020-4883 DESCRIPTION: IBM QRadar SIEM could disclose sensitive information about other domains which could be used in further attacks against the system. CVSS Base score: 4.3 CVSS Tempor...

Security Bulletin: IBM QRadar SIEM is vulnerable to Cross Site Scripting (XSS) (CVE-2020-4929)

Summary IBM QRadar SIEM is vulnerable to Cross Site Scripting Vulnerability Details CVEID: CVE-2020-4929 DESCRIPTION: IBM QRadar SIEM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

Security Bulletin: IBM QRadar SIEM may be vulnerable to a XML External Entity Injection attack (XXE) (CVE-2020-5013)

Summary IBM QRadar SIEM may be vulnerable to a XML External Entity Injection attack Vulnerability Details CVEID: CVE-2020-5013 DESCRIPTION: IBM QRadar SIEM may vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to...

Security Bulletin: IBM QRadar SIEM is vulnerable to path traversal (CVE-2020-4993)

Summary IBM QRadar SIEM is vulnerable to path traversal attack. Vulnerability Details CVEID: CVE-2020-4993 DESCRIPTION: IBM QRadar SIEM when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. CVSS Base score: 4.9 CVSS Tempor...

Security Bulletin: IBM QRadar SIEM is vulnerable to insecure inter-deployment communication (CVE-2020-4979)

Summary IBM QRadar SIEM is vulnerable to insecure inter-deployment communication Vulnerability Details CVEID: CVE-2020-4979 DESCRIPTION: IBM QRadar SIEM is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to...