Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
192 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.4) | 0.34% | 💥 PoC | IBM Qradar Security Information AND Event Manager | 27/3/2024 | 17/6/2026 | IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893. | |
| Analizada | Media (5.4) | 0.34% | — | IBM Qradar Security Information AND Event Manager | 27/3/2024 | 17/6/2026 | IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939. | |
| Modificada | Media (5.3) | 0.42% | — | IBM Qradar Security Information AND Event Manager | 17/1/2024 | 17/6/2026 | IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709. | |
| Modificada | Media (6.5) | 0.73% | — | IBM Qradar Security Information AND Event Manager | 19/12/2023 | 17/6/2026 | IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified. IBM X-Force ID: 270372. | |
| Modificada | Media (5.4) | 0.41% | — | IBM Qradar Security Information AND Event Manager | 11/11/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267484. | |
| Modificada | Media (4.9) | 0.53% | — | IBM Qradar Security Information AND Event Manager | 29/10/2023 | 17/6/2026 | IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808. | |
| Modificada | Media (5.4) | 0.32% | — | IBM Qradar Security Information AND Event Manager | 14/10/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 263376. | |
| Modificada | Alta (7.5) | 0.22% | — | IBM Qradar Security Information AND Event Manager | 14/10/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138 | |
| Modificada | Alta (7.5) | 0.39% | — | IBM Qradar Security Information AND Event Manager | 27/6/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 248147. | |
| Modificada | Media (5.4) | 0.37% | — | IBM Qradar Security Information AND Event Manager | 27/6/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248144. | |
| Modificada | Media (4.3) | 0.44% | — | IBM Qradar Security Information AND Event Manager | 27/6/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 248134. | |
| Modificada | Media (6.5) | 0.63% | — | IBM Qradar Security Information AND Event Manager | 27/6/2023 | 17/6/2026 | IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403. | |
| Modificada | Alta (7.2) | 0.74% | — | IBM Qradar Security Information AND Event Manager | 22/3/2023 | 17/6/2026 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425. | |
| Modificada | Alta (7.5) | 0.39% | — | IBM Qradar Security Information AND Event Manager | 17/2/2023 | 17/6/2026 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402. | |
| Modificada | Alta (7.5) | 0.31% | — | IBM Qradar Security Information AND Event Manager | 17/1/2023 | 17/6/2026 | IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356. | |
| Modificada | Media (5.5) | 0.20% | — | IBM Qradar Security Information AND Event Manager | 7/10/2022 | 17/6/2026 | IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366. | |
| Modificada | Alta (7.5) | 0.85% | — | IBM Qradar Security Information AND Event Manager | 7/10/2022 | 17/6/2026 | IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889. | |
| Modificada | Alta (7.8) | 0.19% | — | IBM Qradar Security Information AND Event Manager | 28/7/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111. | |
| Modificada | Media (5.5) | 0.18% | — | IBM Qradar Security Information AND Event Manager | 20/7/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597. | |
| Modificada | Media (4.9) | 0.86% | — | IBM Qradar Security Information AND Event Manager | 20/7/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893. | |
| Modificada | Alta (7.5) | 0.51% | — | IBM Qradar Security Information AND Event Manager | 20/7/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015. | |
| Modificada | Media (5.3) | 0.99% | — | IBM Qradar Security Information AND Event Manager | 12/7/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM X-Force ID: 214028. | |
| Modificada | Media (4.8) | 0.47% | — | IBM Qradar Security Information AND Event Manager | 11/5/2022 | 17/6/2026 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367. | |
| Modificada | Media (4.8) | 1.8% | — | IBM Qradar Security Information AND Event Manager | 27/4/2022 | 17/6/2026 | IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220041. | |
| Modificada | Media (5.3) | 0.84% | — | IBM Qradar Security Information AND Event Manager | 27/4/2022 | 17/6/2026 | IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037. |