Qradar Security Information And Event Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13_interim_fix_02:*:*:*:*:*:*
part: a version: 7.5.0 update: update_pack_13_interim_fix_02
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Qradar Security Information And Event Manager (9bbe9133-c2ee-50a3-adb5-5846ee9ecb26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36170 |
vulnerable | 2026-06-08 07:21:01.332179 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:46:38.109Z
Updated: 2025-10-27T19:32:23.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36138 |
vulnerable | 2026-06-08 07:21:01.240621 |
IBM QRadar SIEM cross-site scripting
MEDIUM (6.4)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-27T18:47:11.153Z
Updated: 2025-10-27T19:27:11.083Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36007 |
vulnerable | 2026-06-08 07:21:00.398551 |
IBM QRadar SIEM incorrect privilege assignment
HIGH (7.8)
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.
Published: 2025-10-27T18:40:16.046Z
Updated: 2026-02-26T16:57:03.272Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33119 |
vulnerable | 2026-06-08 07:19:01.795600 |
IBM QRadar SIEM Information Disclosure
MEDIUM (6.5)
IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user.
Published: 2025-11-12T21:19:55.966Z
Updated: 2025-11-13T15:03:22.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56464 |
vulnerable | 2026-06-08 06:54:17.872609 |
IBM QRadar SIEM is affected by an information disclosure vulnerability
LOW (2.7)
IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.
Published: 2025-12-09T13:26:15.979Z
Updated: 2025-12-09T14:36:32.867Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.