Qradar Security Information And Event Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13:*:*:*:*:*:*
part: a version: 7.5.0 update: update_pack_13
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1276 |
vulnerable | 2026-06-08 07:49:08.129208 |
IBM QRadar SIEM Cross-Site Scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-19T01:55:39.109Z
Updated: 2026-03-19T17:00:43.668Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36170 |
vulnerable | 2026-06-08 07:21:01.332024 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36138 |
vulnerable | 2026-06-08 07:21:01.240571 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36051 |
vulnerable | 2026-06-08 07:21:00.738463 |
IBM QRadar SIEM Information Disclosure
MEDIUM (6.2)
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Published: 2026-03-19T01:55:44.363Z
Updated: 2026-03-19T16:07:34.904Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36042 |
vulnerable | 2026-06-08 07:21:00.684219 |
IBM QRadar SIEM cross-site scripting
MEDIUM (5.4)
IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-08-22T14:55:01.862Z
Updated: 2025-08-22T15:05:10.392Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36007 |
vulnerable | 2026-06-08 07:21:00.395982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33120 |
vulnerable | 2026-06-08 07:19:01.796588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33119 |
vulnerable | 2026-06-08 07:19:01.793568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15051 |
vulnerable | 2026-06-08 07:06:35.607895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13995 |
vulnerable | 2026-06-08 07:06:33.351555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0164 |
vulnerable | 2026-06-08 07:00:29.812456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56464 |
vulnerable | 2026-06-08 06:54:17.871189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.