Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_14:*:*:*:*:*:*

part: a version: 7.5.0 update: update_pack_14

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1276 vulnerable 2026-06-08 07:49:08.121569 IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-19T01:55:39.109Z
Updated: 2026-03-19T17:00:43.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36051 vulnerable 2026-06-08 07:21:00.737945 IBM QRadar SIEM Information Disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Published: 2026-03-19T01:55:44.363Z
Updated: 2026-03-19T16:07:34.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33119 vulnerable 2026-06-08 07:19:01.792060 IBM QRadar SIEM Information Disclosure
MEDIUM (6.5)
IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user.
Published: 2025-11-12T21:19:55.966Z
Updated: 2025-11-13T15:03:22.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15051 vulnerable 2026-06-08 07:06:35.607570 IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality.
Published: 2026-03-19T01:55:41.122Z
Updated: 2026-03-19T13:34:27.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13995 vulnerable 2026-06-08 07:06:33.346523 IBM QRadar SIEM Information Disclosure
MEDIUM (5)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.
Published: 2026-03-19T01:55:42.813Z
Updated: 2026-03-20T18:11:24.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56464 vulnerable 2026-06-08 06:54:17.868259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.