IBM Qradar Incident Forensics vulnerabilities

17 CVEs affecting IBM Qradar Incident Forensics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36042, published 2025-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1649, published 2018-10-05. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences…
CVE-2016-9727, published 2017-03-07. High severity, CVSS 8.5. EPSS: 2.5% chance of exploitation in the next 30 days. IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute…
CVE-2017-1723, published 2018-04-26. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../)…
CVE-2016-9726, published 2017-03-07. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this…
CVE-2018-1647, published 2018-10-05. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID:…
CVE-2018-1648, published 2018-12-05. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144653.
CVE-2016-9720, published 2017-03-07. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference #: 1999533.
CVE-2017-1724, published 2018-04-26. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…
CVE-2018-1728, published 2018-12-05. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…
CVE-2017-1622, published 2018-12-05. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.…

Latest

CVE-2025-36042, published 2025-08-22. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the…
CVE-2025-33120, published 2025-08-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.
CVE-2018-1650, published 2018-12-05. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication configured by the administrator. IBM X-Force ID: 144656.
CVE-2018-1568, published 2018-12-05. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.