CVE-2025-36042

IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7242869	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:-::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_1::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_10::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_11::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_12::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_13::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_2::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_3::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_4::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_5::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_6::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_7::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_8::::::
	cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_9::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_10::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_11::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_12::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8::::::
	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_9::::::

History

15 Sep 2025, 19:53

Type	Values Removed	Values Added
References	~~() https://www.ibm.com/support/pages/node/7242869 -~~	() https://www.ibm.com/support/pages/node/7242869 - Vendor Advisory
CPE		cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_10:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_3:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:-:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_1:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_7:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_2:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_10:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_9:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_9:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_6:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_8:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_13:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_11:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_12:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_12:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_4:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_11:::::: cpe:2.3:a:ibm:qradar_incident_forensics:7.5.0:update_pack_5:::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13::::::
First Time		Ibm qradar Incident Forensics Ibm qradar Security Information And Event Manager Ibm
Summary		(es) El panel de control de IBM QRadar SIEM 7.5 a 7.5.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a un usuario autenticado incrustar código JavaScript arbitrario en la interfaz web, alterando así la funcionalidad prevista y pudiendo provocar la divulgación de credenciales en una sesión de confianza.

22 Aug 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-22 15:15

Updated : 2025-09-15 19:53

NVD link : CVE-2025-36042

Mitre link : CVE-2025-36042

CVE.ORG link : CVE-2025-36042

JSON object : View

Products Affected

ibm

qradar_security_information_and_event_manager
qradar_incident_forensics

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

5.4 /10