Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:*:*:*:*:*:*

part: a version: 7.5.0 update: update_pack_6

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1276 vulnerable 2026-06-08 07:49:08.147587 IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-19T01:55:39.109Z
Updated: 2026-03-19T17:00:43.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36170 vulnerable 2026-06-08 07:21:01.332399 IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36138 vulnerable 2026-06-08 07:21:01.241079 IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36051 vulnerable 2026-06-08 07:21:00.738848 IBM QRadar SIEM Information Disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Published: 2026-03-19T01:55:44.363Z
Updated: 2026-03-19T16:07:34.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36050 vulnerable 2026-06-08 07:21:00.730600 IBM QRadar SIEM information disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.
Published: 2025-06-19T17:13:40.753Z
Updated: 2025-08-26T14:52:33.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36042 vulnerable 2026-06-08 07:21:00.702923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36007 vulnerable 2026-06-08 07:21:00.404374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33121 vulnerable 2026-06-08 07:19:01.809245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33120 vulnerable 2026-06-08 07:19:01.808271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33119 vulnerable 2026-06-08 07:19:01.795831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33118 vulnerable 2026-06-08 07:19:01.787588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33117 vulnerable 2026-06-08 07:19:01.784057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33097 vulnerable 2026-06-08 07:19:01.744083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15051 vulnerable 2026-06-08 07:06:35.608324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13995 vulnerable 2026-06-08 07:06:33.362307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0164 vulnerable 2026-06-08 07:00:29.821368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56464 vulnerable 2026-06-08 06:54:17.877599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56463 vulnerable 2026-06-08 06:54:17.864314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47107 vulnerable 2026-06-08 06:48:11.400266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28786 vulnerable 2026-06-08 06:33:27.323916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28784 vulnerable 2026-06-08 06:33:27.322423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27269 vulnerable 2026-06-08 06:31:28.388355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50961 vulnerable 2026-06-08 06:16:17.150615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50950 vulnerable 2026-06-08 06:16:17.126106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50949 vulnerable 2026-06-08 06:16:17.122378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47146 vulnerable 2026-06-08 06:14:24.077049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43057 vulnerable 2026-06-08 06:11:09.859006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43041 vulnerable 2026-06-08 06:11:09.809877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40367 vulnerable 2026-06-08 06:09:42.167635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30994 vulnerable 2026-06-08 06:04:41.604864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.