CVE-2025-36138

IBM QRadar SIEM affects CVE-2025-36138: stored cross-site scripting in IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02. Root cause per sources is insufficient input handling in the Web UI, potentially allowing an authenticated user to inject JavaScript and disclose credentials...

CVE-2023-50949

IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706...

CVE-2023-50950

IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709...