CVE-2024-28786

🗓️ 27 Jan 2025 23:36:08Reported by ibmType

IBM QRadar SIEM 7.5 transmits sensitive data in cleartext, vulnerable to man in the middle attacks.

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:04	–	ibm
Circl	CVE-2024-28786	27 Jan 202523:43	–	circl
CNNVD	IBM QRadar SIEM 安全漏洞	18 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-28786 IBM QRadar SIEM information disclosure	27 Jan 202523:36	–	cvelist
EUVD	EUVD-2024-25872	3 Oct 202520:07	–	euvd
NVD	CVE-2024-28786	28 Jan 202500:15	–	nvd
OSV	CVE-2024-28786	28 Jan 202500:15	–	osv
RedhatCVE	CVE-2024-28786	23 May 202507:09	–	redhatcve
Vulnrichment	CVE-2024-28786 IBM QRadar SIEM information disclosure	27 Jan 202523:36	–	vulnrichment

NVD

Vulners

Node

ibm qradar_security_information_and_event_managerMatch7.5.0-

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_1

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_2

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_3

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_4

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_5

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_6

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_7

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_8

ibm qradar_security_information_and_event_managerMatch7.5.0update_pack_9

AND

linux linux_kernelMatch-

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "QRadar SIEM",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.5"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7173420

25 Jul 2025 18:51Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00028

SSVC

CWE-319