Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 15

Vendor: IBM Corporation

Software: IBM Qradar SIEM

Version: 7.5.0 Update Pack 15

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 37

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (37)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU132273 - Incorrect Calculation CVE-2025-14813	CWE-682	Medium	No	No	7.5.0 Update Pack 15 IF05	25.05.2026	SB2026052529 SB2026052540 SB2026052541 and 17 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2026-0636	CWE-90	Medium	No	No	7.5.0 Update Pack 15 IF05	25.05.2026	SB2026052529 SB2026052531 SB2026052540 and 13 more
#VU132259 - Covert Timing Channel CVE-2026-5598	CWE-385	Medium	No	No	7.5.0 Update Pack 15 IF05	25.05.2026	SB2026052530 SB2026052544 SB2026052931 and 16 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-35554	CWE-362	High	No	No	7.5.0 Update Pack 15 IF05	21.05.2026	SB2026052106 SB2026052107 SB2026052541 and 8 more
#VU126752 - Improper input validation CVE-2026-27727	CWE-20	High	No	No	7.5.0 Update Pack 15 IF05	22.04.2026	SB20260422128 SB20260422169 SB20260422170 and 7 more
#VU126753 - Deserialization of Untrusted Data CVE-2026-27830	CWE-502	Medium	No	No	7.5.0 Update Pack 15 IF05	22.04.2026	SB20260422128 SB20260422168 SB20260422170 and 8 more
#VU125790 - Integer overflow CVE-2026-40046	CWE-190	Medium	No	No	7.5.0 Update Pack 15 IF05	10.04.2026	SB2026041072 SB2026050348 SB2026050349 and 4 more
#VU125787 - Improper Control of Generation of Code ('Code Injection') CVE-2026-34197	CWE-94	Medium	Public exploit available	Exploited	7.5.0 Update Pack 15 IF05	10.04.2026	SB2026041071 SB2026050348 SB2026050349 and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-33227	CWE-22	Low	No	No	7.5.0 Update Pack 15 IF05	10.04.2026	SB2026041071 SB2026050348 SB2026050349 and 5 more
#VU125747 - Improper Encoding or Escaping of Output CVE-2026-34483	CWE-116	Medium	No	No	7.5.0 Update Pack 15 IF05	09.04.2026	SB20260409110 SB20260417131 SB20260422214 and 19 more
#VU125744 - Improper Certificate Validation CVE-2026-34500	CWE-295	Low	No	No	7.5.0 Update Pack 15 IF05	09.04.2026	SB20260409110 SB20260417131 SB20260422214 and 13 more
#VU125745 - Information Exposure Through Log Files CVE-2026-34487	CWE-532	Medium	No	No	7.5.0 Update Pack 15 IF05	09.04.2026	SB20260409110 SB20260417131 SB20260422214 and 20 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-24880	CWE-444	Medium	No	No	7.5.0 Update Pack 15 IF05	09.04.2026	SB20260409109 SB20260417131 SB20260422214 and 18 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-25854	CWE-601	Low	No	No	7.5.0 Update Pack 15 IF05	09.04.2026	SB20260409109 SB2026041565 SB20260417131 and 14 more
#VU123488 - Integer overflow CVE-2025-66168	CWE-190	Medium	No	No	7.5.0 Update Pack 15 IF05	04.03.2026	SB2026030411 SB2026031501 SB2026031502 and 10 more
#VU122779 - Memory corruption CVE-2026-2006	CWE-119	Medium	No	No	7.5.0 Update Pack 15 IF05	12.02.2026	SB2026021258 SB2026021302 SB2026021303 and 69 more
#VU122778 - Heap-based Buffer Overflow CVE-2026-2005	CWE-122	Medium	No	No	7.5.0 Update Pack 15 IF05	12.02.2026	SB2026021258 SB2026021302 SB2026021303 and 60 more
#VU121007 - Exposure of sensitive information to an unauthorized actor CVE-2025-66566	CWE-200	Medium	No	No	7.5.0 Update Pack 15 IF05	07.01.2026	SB2026010702 SB2026010705 SB2026010706 and 28 more
#VU121006 - Out-of-bounds read CVE-2025-12183	CWE-125	Medium	No	No	7.5.0 Update Pack 15 IF05	07.01.2026	SB2026010701 SB2026010705 SB2026010706 and 14 more
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	7.5.0 Update Pack 15 IF05	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more

Showing elements 1 - 20 out of 37

Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 15

Vulnerabilities by Severity

Vulnerabilities (37)

Please verify you're human