IBM QRadar SIEM Users at Risk of XSS Attack and Information Disclosure

IBM QRadar is a popular SIEM (Security Incident and Event Management) tool that organizations use to detect and monitor threats. It can be used in the form of a physical appliance, a software-only solution, or a virtual appliance. As of 2023, over 1,130 companies worldwide use IBM QRadar as part of their SIEM.

Recently, IBM discovered three new vulnerabilities in IBM QRadar. These vulnerabilities were related to cryptography, cross-site scripting (XSS), and information disclosure. IBM has released fixes for these vulnerabilities. The vulnerabilities were discovered by IBM’s Security Ethical Hacking team.

• Alert

CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

By infosecbulletin / Wednesday , June 4 2025

IBM has issued a security advisory for vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. These...

Read More

• Alert
• Cyber Attack

ALERT
Thousands of IP addresses compromised nationwide: CIRT warn

By infosecbulletin / Wednesday , June 4 2025

As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent...

Read More

• Alert
• Hot Topic

New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

By infosecbulletin / Tuesday , June 3 2025

In March 2025, the Threatfabric mobile Threat Intelligence team identified Crocodilus, a new Android banking Trojan designed for device takeover....

Read More

• Alert
• Vulnerabilities

Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

By infosecbulletin / Tuesday , June 3 2025

Qualcomm has issued security patches for three zero-day vulnerabilities in the Adreno GPU driver, affecting many chipsets that are being...

Read More

• Alert
• Vulnerabilities

Critical RCE Flaw Patched in Roundcube Webmail

By infosecbulletin / Monday , June 2 2025

Roundcube Webmail has fixed a critical security flaw that could enable remote code execution after authentication. Disclosed by security researcher...

Read More

• Cyber Attack
• Data Breach

Hacker claim Leak of Deloitte Source Code & GitHub Credentials

By infosecbulletin / Sunday , June 1 2025

A hacker known as "303" claim to breach the company's systems and leaked sensitive internal data on a dark web...

Read More

• International

CISA Issued Guidance for SIEM and SOAR Implementation

By infosecbulletin / Sunday , June 1 2025

CISA and ACSC issued new guidance this week on how to procure, implement, and maintain SIEM and SOAR platforms. SIEM...

Read More

• Vulnerabilities

Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

By infosecbulletin / Saturday , May 31 2025

The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....

Read More

• International

Australia enacts mandatory ransomware payment reporting

By infosecbulletin / Saturday , May 31 2025

New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...

Read More

• Hot Topic

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

By infosecbulletin / Saturday , May 31 2025

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...

Read More

IBM QRadar SIEM Flaw

CVE-2023-26276: Weak Cryptographic Algorithm:

This vulnerability exists due to the use of a weaker or expected cryptographic algorithm in the QRadar tool, which could allow a threat actor to decrypt highly sensitive information. This vulnerability was given a CVSS Score of 5.9 (medium)

ALSO READ:

Cisco AsyncOS Software Flaw Let Remote Hackers Launch XSS Attack

CVE-2023-26274: Cross-Site Scripting (XSS):

An attacker can exploit this vulnerability to embed arbitrary JS code in the Web UI that can alter the functionality that can lead to credentials disclosure through XSS on a trusted session. This vulnerability was given a CVSS Score of 4.6 (medium).

CVE-2022-34352: Information Disclosure
This vulnerability allows a delegated Admin tenant with a specific domain security profile to see other domain data.This vulnerability was given a CVSS Score of 6.5 (medium).

IBM recommended all its users patch their IBM QRadar SIEM by upgrading it to the latest version.

Source: IBM, GB hacker, vulners.com