Количество 3
Количество 3
CVE-2025-36138
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
GHSA-qm4w-8f5q-j6mh
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
BDU:2025-16370
Уязвимость системы сбора и анализа событий безопасности IBM QRadar SIEM, связанная с ошибками присваивания привилегий, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-36138 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
| GHSA-qm4w-8f5q-j6mh IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
 | BDU:2025-16370 Уязвимость системы сбора и анализа событий безопасности IBM QRadar SIEM, связанная с ошибками присваивания привилегий, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.8 | 0% Низкий | 10 месяцев назад |
Уязвимостей на страницу