Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

QRadar — Vulnerabilities & Security Advisories 22

All 22 CVE vulnerabilities found in QRadar, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the IBM QRadar security intelligence platform, categorized by their specific weakness types and associated risk tags. The collection encompasses a comprehensive range of flaws identified over the past decade, including remote code execution, privilege escalation, denial of service, and information disclosure issues reported across various software versions. Security professionals can utilize this resource to track official vendor advisories, analyze the prevalence and impact of specific weakness classes within the product ecosystem, and review the complete historical record of security incidents related to QRadar deployments. By consolidating these findings into a single view, the page facilitates efficient risk assessment and remediation planning for organizations relying on QRadar for their security information and event management operations. The data presented here is derived from public advisories and verified vulnerability databases to ensure accuracy and relevance for ongoing security maintenance tasks. Users seeking to understand the evolution of threats targeting this specific SIEM solution will find detailed contextual information regarding affected components and recommended mitigation strategies without the need to consult multiple disparate sources.

Vendor: IBM

CVE ID Title CVSS Severity Published
CVE-2026-93442 IBM QRadar SIEM Out-of-bounds Read CWE-125 8.2 High 2026-10-20
CVE-2025-33141 IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. CWE-497 6.5 Medium 2026-09-18
CVE-2026-5522 QRadar contains hard-coded credentials CWE-798 6.7 Medium 2026-09-04
CVE-2026-10025 IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability CWE-611 8.2 High 2026-08-05
CVE-2026-13477 IBM QRadar SIEM is vulnerable to remote code execution by privileged users CWE-78 4.7 Medium 2026-08-05
CVE-2024-56462 IBM QRadar SIEM is vulnerable to using components with known vulnerabilities CWE-530 7.2 High 2026-05-27
CVE-2025-13995 IBM QRadar SIEM Information Disclosure CWE-1286 5.0 Medium 2026-03-19
CVE-2020-4980 IBM QRadar SIEM 安全漏洞 7.5 - 2021-07-16
CVE-2020-4294 IBM QRadar SIEM 代码问题漏洞 6.3 - 2020-04-15
CVE-2020-4272 IBM QRadar SIEM 代码问题漏洞 9.8 - 2020-04-15
CVE-2020-4274 IBM QRadar SIEM 安全漏洞 5.4 - 2020-04-15
CVE-2020-4271 IBM QRadar SIEM 代码问题漏洞 7.6 - 2020-04-15
CVE-2020-4270 IBM QRadar SIEM 安全漏洞 7.8 - 2020-04-15
CVE-2020-4269 IBM QRadar SIEM 信任管理问题漏洞 9.1 - 2020-04-15
CVE-2020-4268 IBM QRadar SIEM 跨站脚本漏洞 5.4 - 2020-04-15
CVE-2019-4654 IBM QRadar SIEM 信任管理问题漏洞 6.5 - 2020-04-15
CVE-2019-4594 IBM QRadar SIEM 信息泄露漏洞 5.9 - 2020-04-15
CVE-2019-4593 IBM QRadar SIEM 信息泄露漏洞 5.3 - 2020-04-15
CVE-2019-4581 IBM QRadar SIEM 跨站脚本漏洞 5.4 - 2019-11-09
CVE-2019-4509 IBM QRadar SIEM 安全漏洞 4.3 - 2019-11-09
CVE-2019-4470 IBM QRadar SIEM 跨站脚本漏洞 5.4 - 2019-11-09
CVE-2019-4454 IBM QRadar SIEM 跨站脚本漏洞 5.4 - 2019-11-09

All 22 known CVE vulnerabilities affecting QRadar with full Chinese analysis, references, and POCs where available.