CVE-2017-1133

Overview : CVE-2017-1133 is an cross-site scripting vulnerability in IBM QRadar SIEM (7.2.x) where an attacker could inject arbitrary JavaScript into the Web UI, potentially exposing credentials within a trusted session. The issue is surfaced in IBM QRadar SIEM and Incident Forensics, and is rela...

CVE-2016-9727

CVE-2016-9727 affects IBM QRadar SIEM 7.2. It describes an OS command injection where a remote authenticated attacker could execute arbitrary commands on the system by sending a specially crafted request. The CVSS v3 base score is 8.5 (HIGH) with network access, high impact on confidentiality, in...

CVE-2018-1648

IBM QRadar Incident Forensics is affected by CVE-2018-1648 due to use of outdated insecure cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Affected versions: QRadar Incident Forensics 7.2.0–7.2.8 Patch 13 and 7.3.0–7.3.1 Patch 5. Impact as described:...

CVE-2016-9723

CVE-2016-9723 affects IBM QRadar SIEM (and QRadar Incident Forensics) 7.2.x. The vulnerability is a cross-site scripting flaw in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. In spite of the CVE's pres...

CVE-2017-1723

CVE-2017-1723 affects IBM QRadar SIEM (versions 7.2.x up to 7.2.8 Patch 11 and 7.3.x up to 7.3.0 Patch 7). The vulnerability is a path traversal flaw caused by raw string concatenation when processing user-supplied URLs containing dot-dot sequences (/../), allowing a remote attacker to view arbit...

CVE-2016-9726

CVE-2016-9726 is an OS command injection vulnerability in IBM QRadar SIEM/Incident Forensics 7.2. A remote authenticated attacker could pass unsafe data to a system shell via a specially crafted request, enabling arbitrary command execution. IBM’s remediation is to upgrade to QRadar 7.2.8 Patch 4...

CVE-2017-1724

IBM QRadar SIEM is affected by CVE-2017-1724 (XSS) in versions 7.2.x and 7.3.x. Affected: QRadar/QRM/QVM/QRIF/QNI 7.3.0–7.3.1 Patch 2; 7.2.0–7.2.8 Patch 11. Root cause: cross-site scripting in the Web UI allowing arbitrary JavaScript execution that can lead to credential disclosure within a trust...

CVE-2018-1728

IBM QRadar SIEM is affected by a cross-site scripting vulnerability (CVE-2018-1728) that could allow an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected versions: QRadar SIEM 7.2.0–7.2.8 Patch 13 and 7.3.0–7....

CVE-2017-1622

CVE-2017-1622 affects IBM QRadar SIEM 7.2.x (7.2.0 to 7.2.8 Patch 13) and 7.3.x (7.3.0 to 7.3.1 Patch 6/7). The root cause is improper certificate validation in the QRadar Application Framework, allowing a MITM attacker to spoof a trusted entity. Affected component/file relates to certificate val...

CVE-2016-9720

CVE-2016-9720 affects IBM QRadar SIEM (and Incident Forensics) 7.2.x, where information disclosure allows unauthorized users to access sensitive data. The NVD/IBM entries cite a CVSS v3.0 base score of 5.3 (vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) and a CVSS v2 base score of 5.0. IBM...

CVE-2016-9730

CVE-2016-9730 affects IBM Security QRadar SIEM and QRadar Incident Forensics 7.2.x. The issue is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious and unauthorized actions transmitted from a trusted user’s session. The publicly available connected...

CVE-2018-1568

IBM QRadar SIEM versions 7.2.0–7.2.8 Patch 13 and 7.3.0–7.3.1 Patch 4 are affected by a vulnerability where browsers cache web pages containing sensitive information, enabling a local attacker with access to read data stored on the user’s hard drive. IBM/IBM X-Force ID: 143118. Remediation: upgra...

CVE-2018-1649

IBM QRadar Incident Forensics is affected by CVE-2018-1649, a path traversal vulnerability in file path processing during download/upload. The issue arises from unsafe handling of path components, allowing a remote attacker to use a crafted URL containing dot-dot sequences ("/../") to view arbitr...

CVE-2018-1650

CVE-2018-1650 affects IBM QRadar Incident Forensics (and relates to QRadar SIEM) with hard-coded credentials that could allow an attacker to bypass the administrator’s authentication. Affected versions for Incident Forensics: 7.2.0–7.2.8 Patch 13 and 7.3.0–7.3.1 Patch 4; IBM has remediation patch...

CVE-2018-1647

CVE-2018-1647 affects IBM QRadar Incident Forensics 7.2.x and 7.3.x. The issue arises from insufficient restriction of the size/quantity of resources requested, enabling an unauthenticated user to cause a denial of service. Public details in the IBM security bulletin enumerate affected versions: ...

CVE-2025-33120

IBM QRadar SIEM versions 7.5 through 7.5.0 UP13 are affected by a local privilege escalation due to a misconfigured cronjob that runs with unnecessary privileges. The vulnerability (CWE-250) allows an authenticated user to escalate privileges because the cronjob is executed with elevated rights. ...

CVE-2025-36042

IBM QRadar SIEM versions 7.5 through 7.5.0 Dashboard are vulnerable to cross-site scripting (CVE-2025-36042). An authenticated user can embed arbitrary JavaScript in the Web UI, potentially altering functionality and disclosing credentials within a trusted session. The issue is tied to the Dashbo...