# Ibm Qradar Security Information and Event Manager


- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-4210](https://insights.sbomify.com/CVE-2019-4210/): Auth bypass in QRadar SIEM (critical 9.4)
- [CVE-2014-3062](https://insights.sbomify.com/CVE-2014-3062/): Code injection in n/a (critical 9.3)
- [CVE-2025-33117](https://insights.sbomify.com/CVE-2025-33117/): IBM QRadar SIEM command execution (critical 9.1)
- [CVE-2020-4512](https://insights.sbomify.com/CVE-2020-4512/): Command injection in QRadar SIEM (critical 9.1)
- [CVE-2015-2011](https://insights.sbomify.com/CVE-2015-2011/): Command injection in n/a (critical 9.0)
- [CVE-2015-2016](https://insights.sbomify.com/CVE-2015-2016/): Command injection in n/a (critical 9.0)
- [CVE-2015-4930](https://insights.sbomify.com/CVE-2015-4930/): Command injection in n/a (critical 9.0)
- [CVE-2018-1571](https://insights.sbomify.com/CVE-2018-1571/): Command injection in QRadar SIEM (high 8.8)
- [CVE-2018-1418](https://insights.sbomify.com/CVE-2018-1418/): Auth bypass in Security QRadar SIEM (high 8.8)
- [CVE-2015-2009](https://insights.sbomify.com/CVE-2015-2009/): Cross-site request forgery in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/qradar-security-information-and-event-manager/