IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
History

Mon, 25 Aug 2025 22:45:00 +0000

Type Values Removed Values Added
First Time appeared Ibm
Ibm qradar Security Information And Event Manager
CPEs cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_11:*:*:*:*:*:*
Vendors & Products Ibm
Ibm qradar Security Information And Event Manager

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00018}

epss

{'score': 0.0002}


Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00046}

epss

{'score': 0.00018}


Fri, 14 Feb 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 14 Feb 2025 16:30:00 +0000

Type Values Removed Values Added
Description IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Title IBM QRadar SIEM cross-site scripting
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2025-08-25T22:33:35.220Z

Reserved: 2024-12-26T12:50:20.772Z

Link: CVE-2024-56463

cve-icon Vulnrichment

Updated: 2025-02-14T16:46:19.352Z

cve-icon NVD

Status : Received

Published: 2025-02-14T17:15:16.420

Modified: 2025-02-14T17:15:16.420

Link: CVE-2024-56463

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.