IBM QRadar Security Information and Event Manager (SIEM) 7.5.0 Update Pack 10
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_10:*:*:*:*:*:*
part: a version: 7.5.0 update: update_pack_10
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1276 |
vulnerable | 2026-06-08 07:49:08.125017 |
IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-19T01:55:39.109Z
Updated: 2026-03-19T17:00:43.668Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36170 |
vulnerable | 2026-06-08 07:21:01.331863 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36138 |
vulnerable | 2026-06-08 07:21:01.240218 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36051 |
vulnerable | 2026-06-08 07:21:00.738129 |
IBM QRadar SIEM Information Disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Published: 2026-03-19T01:55:44.363Z
Updated: 2026-03-19T16:07:34.904Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36050 |
vulnerable | 2026-06-08 07:21:00.730089 |
IBM QRadar SIEM information disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.
Published: 2025-06-19T17:13:40.753Z
Updated: 2025-08-26T14:52:33.272Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36042 |
vulnerable | 2026-06-08 07:21:00.702369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36007 |
vulnerable | 2026-06-08 07:21:00.391685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33121 |
vulnerable | 2026-06-08 07:19:01.809014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33120 |
vulnerable | 2026-06-08 07:19:01.807968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33119 |
vulnerable | 2026-06-08 07:19:01.792267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33118 |
vulnerable | 2026-06-08 07:19:01.787148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33117 |
vulnerable | 2026-06-08 07:19:01.783691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33097 |
vulnerable | 2026-06-08 07:19:01.739657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15051 |
vulnerable | 2026-06-08 07:06:35.607731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13995 |
vulnerable | 2026-06-08 07:06:33.348423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0164 |
vulnerable | 2026-06-08 07:00:29.814102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56464 |
vulnerable | 2026-06-08 06:54:17.868339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56463 |
vulnerable | 2026-06-08 06:54:17.860231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47107 |
vulnerable | 2026-06-08 06:48:11.396348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.