Vulnerabilities > IBM > Qradar Security Information AND Event Manager > Low

DATE CVE VULNERABILITY TITLE RISK
2022-05-11 CVE-2022-22320 Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager 7.3.3/7.4.3
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2022-04-27 CVE-2022-22345 Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-07-16 CVE-2020-4980 Cleartext Transmission of Sensitive Information vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest.
low complexity
ibm CWE-319
3.3
2021-05-05 CVE-2020-4929 Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-02-04 CVE-2020-5032 Unspecified vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads.
low complexity
ibm
3.3
2021-01-27 CVE-2020-4787 Server-Side Request Forgery (SSRF) vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF).
local
low complexity
ibm CWE-918
2.1
2020-11-05 CVE-2018-1725 Unspecified vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure.
local
low complexity
ibm
2.1
2020-07-14 CVE-2020-4364 Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2020-04-15 CVE-2020-4268 Cross-site Scripting vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2020-01-10 CVE-2019-4508 Insufficiently Protected Credentials vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker.
local
low complexity
ibm CWE-522
2.1