IBM QRadar Privilege Escalation

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to privilege assignment errors. Exploiting this vulnerability can allow attackers to increase their privileges...

EUVD-2021-25478

Malware in sbrugna...

CVE-2025-33118

CVE-2025-33118 affects IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 with a stored cross-site scripting (XSS) in the Web UI, allowing authenticated users to inject JavaScript and potentially disclose credentials in a trusted session. Remediation per IBM is to upgrade to QRadar SIEM 7.5.0 UP13 ...

Kraken Stress Testing Toolkit Header Misuse

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to the improper use of X-Content-Type-Options headers for protection mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability in its Internal Users module . The root cause is a deficiency in access control that allows an attacker to create internal users without assigning any existing user roles. This can lead to privilege escalation or unauth...

IBM QRadar SIEM Cross-Site Script Vulnerability

IBM QRadar SIEM is a solution from IBM USA that leverages security intelligence to protect assets and information from advanced threats. The solution provides monitoring of the entire scope of the IT architecture, generating detailed reports on data access and user activity, etc. A cross-site...

IBM QRadar SIEM Server-Side Request Forgery Vulnerability (CNVD-2021-10825)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A server-side...

IBM QRadar SIEM XML External Object Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information or utilize memory resources...