IBM QRadar SIEM Users at Risk of XSS Attack and Information Disclosure

IBM QRadar is a popular SIEM (Security Incident and Event Management) tool that organizations use to detect and monitor threats. It can be used in the form of a physical appliance, a software-only solution, or a virtual appliance. As of 2023, over 1,130 companies worldwide use IBM QRadar as part of their SIEM.

Recently, IBM discovered three new vulnerabilities in IBM QRadar. These vulnerabilities were related to cryptography, cross-site scripting (XSS), and information disclosure. IBM has released fixes for these vulnerabilities. The vulnerabilities were discovered by IBM’s Security Ethical Hacking team.

• Cyber Attack
• Data Breach

Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore

By infosecbulletin / Friday , October 2 2026

Nearly 100,000 Bee Cheng Hiang customers had their email addresses leaked when an employee used an AI tool to generate...

Read More

• Alert

Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws

By infosecbulletin / Thursday , October 1 2026

Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that...

Read More

• Alert

Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws

By infosecbulletin / Wednesday , September 30 2026

Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden...

Read More

• Alert

CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks

By infosecbulletin / Wednesday , September 30 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could...

Read More

• Alert
• Cyber Attack

Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People

By infosecbulletin / Tuesday , September 29 2026

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been...

Read More

• Cyber Attack

JadePuffer Agentic AI targets and destroys Azure’s cloud resources

By infosecbulletin / Tuesday , September 29 2026

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The...

Read More

• Event
• Feature

“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”

By infosecbulletin / Tuesday , September 29 2026

The 5th Edition of InfoSecCon-2026, a premier cybersecurity-focused event, has been successfully completed with the participation of cybersecurity professionals, technology...

Read More

• Alert

Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation

By infosecbulletin / Saturday , September 19 2026

Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The...

Read More

• Hot Topic

AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage

By infosecbulletin / Friday , September 18 2026

Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and ‌one of three data-hosting zones in the...

Read More

• Alert

Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw

By infosecbulletin / Friday , September 18 2026

A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that...

Read More

IBM QRadar SIEM Flaw

CVE-2023-26276: Weak Cryptographic Algorithm:

This vulnerability exists due to the use of a weaker or expected cryptographic algorithm in the QRadar tool, which could allow a threat actor to decrypt highly sensitive information. This vulnerability was given a CVSS Score of 5.9 (medium)

ALSO READ:

Cisco AsyncOS Software Flaw Let Remote Hackers Launch XSS Attack

CVE-2023-26274: Cross-Site Scripting (XSS):

An attacker can exploit this vulnerability to embed arbitrary JS code in the Web UI that can alter the functionality that can lead to credentials disclosure through XSS on a trusted session. This vulnerability was given a CVSS Score of 4.6 (medium).

CVE-2022-34352: Information Disclosure
This vulnerability allows a delegated Admin tenant with a specific domain security profile to see other domain data.This vulnerability was given a CVSS Score of 6.5 (medium).

IBM recommended all its users patch their IBM QRadar SIEM by upgrading it to the latest version.

Source: IBM, GB hacker, vulners.com