Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:*

part: a version: 7.5.0 update: update_pack_3

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1276 vulnerable 2026-06-08 07:49:08.141548 IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-19T01:55:39.109Z
Updated: 2026-03-19T17:00:43.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36170 vulnerable 2026-06-08 07:21:01.332338 IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36138 vulnerable 2026-06-08 07:21:01.240669 IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36051 vulnerable 2026-06-08 07:21:00.738622 IBM QRadar SIEM Information Disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Published: 2026-03-19T01:55:44.363Z
Updated: 2026-03-19T16:07:34.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36050 vulnerable 2026-06-08 07:21:00.730452 IBM QRadar SIEM information disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.
Published: 2025-06-19T17:13:40.753Z
Updated: 2025-08-26T14:52:33.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36042 vulnerable 2026-06-08 07:21:00.702754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36007 vulnerable 2026-06-08 07:21:00.400860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33121 vulnerable 2026-06-08 07:19:01.809072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33120 vulnerable 2026-06-08 07:19:01.808214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33119 vulnerable 2026-06-08 07:19:01.795765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33118 vulnerable 2026-06-08 07:19:01.787308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33117 vulnerable 2026-06-08 07:19:01.783907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33097 vulnerable 2026-06-08 07:19:01.741917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15051 vulnerable 2026-06-08 07:06:35.608065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13995 vulnerable 2026-06-08 07:06:33.353186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0164 vulnerable 2026-06-08 07:00:29.818796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56464 vulnerable 2026-06-08 06:54:17.874084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56463 vulnerable 2026-06-08 06:54:17.861719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47107 vulnerable 2026-06-08 06:48:11.398047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28786 vulnerable 2026-06-08 06:33:27.323849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28784 vulnerable 2026-06-08 06:33:27.319562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27269 vulnerable 2026-06-08 06:31:28.385752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50961 vulnerable 2026-06-08 06:16:17.150391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50950 vulnerable 2026-06-08 06:16:17.125756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50949 vulnerable 2026-06-08 06:16:17.120145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47146 vulnerable 2026-06-08 06:14:24.074077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43057 vulnerable 2026-06-08 06:11:09.858752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43041 vulnerable 2026-06-08 06:11:09.807327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40367 vulnerable 2026-06-08 06:09:42.165617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30994 vulnerable 2026-06-08 06:04:41.602542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26276 vulnerable 2026-06-08 05:57:39.023335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26274 vulnerable 2026-06-08 05:57:39.022466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26273 vulnerable 2026-06-08 05:57:39.019850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43863 vulnerable 2026-06-08 05:49:34.897181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34352 vulnerable 2026-06-08 05:44:52.669842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34351 vulnerable 2026-06-08 05:44:52.668405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.