Qradar Security Information And Event Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13_interim_fix_01:*:*:*:*:*:*
part: a version: 7.5.0 update: update_pack_13_interim_fix_01
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36170 |
vulnerable | 2026-06-08 07:21:01.332149 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36138 |
vulnerable | 2026-06-08 07:21:01.240595 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36007 |
vulnerable | 2026-06-08 07:21:00.396852 |
IBM QRadar SIEM incorrect privilege assignment
HIGH (7.8)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.
Published: 2025-10-27T18:40:16.046Z
Updated: 2026-02-26T16:57:03.272Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33119 |
vulnerable | 2026-06-08 07:19:01.794507 |
IBM QRadar SIEM Information Disclosure
MEDIUM (6.5)
IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user.
Published: 2025-11-12T21:19:55.966Z
Updated: 2025-11-13T15:03:22.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0164 |
vulnerable | 2026-06-08 07:00:29.816576 |
IBM QRadar SIEM information disclosure
LOW (2.3)
IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment.
Published: 2025-09-14T12:57:32.490Z
Updated: 2025-09-15T15:59:20.829Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56464 |
vulnerable | 2026-06-08 06:54:17.871927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.