Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 14 IF01

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.5.0 Update Pack 14 IF01
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 76
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 14 IF01 IBM Qradar SIEM 7.5.0 Update Pack 14 IF01 is affected by 76 vulnerabilities: 1 critical, 4 high, 28 medium, 43 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198		 CWE-1286 High
No
No
 7.5.0 Update Pack 15 IF05 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199		 CWE-130 Medium
No
No
 7.5.0 Update Pack 15 IF05 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 7.5.0 Update Pack 15 IF05 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 17 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 7.5.0 Update Pack 15 IF05 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 13 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 7.5.0 Update Pack 15 IF05 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU126752 - Improper input validation
CVE-2026-27727		 CWE-20 High
No
No
 7.5.0 Update Pack 15 IF05 22.04.2026 SB20260422128
SB20260422169
SB20260422170
and 7 more
#VU126753 - Deserialization of Untrusted Data
CVE-2026-27830		 CWE-502 Medium
No
No
 7.5.0 Update Pack 15 IF05 22.04.2026 SB20260422128
SB20260422168
SB20260422170
and 8 more
#VU125791 - Improper Check or Handling of Exceptional Conditions
CVE-2026-39304		 CWE-703 Medium
No
No
 7.5.0 Update Pack 15 IF05 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 6 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 13 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU122779 - Memory corruption
CVE-2026-2006		 CWE-119 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 69 more
#VU122778 - Heap-based Buffer Overflow
CVE-2026-2005		 CWE-122 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122777 - Type confusion
CVE-2026-2004		 CWE-843 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 7.5.0 Update Pack 15 IF05 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183		 CWE-125 Medium
No
No
 7.5.0 Update Pack 15 IF05 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 7.5.0 Update Pack 15 IF05 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU87746 - Improper Authorization
CVE-2021-47154		 CWE-285 Medium
No
No
 7.5.0 Update Pack 15 IF05 22.03.2024 SB2024032269
SB2024032274
SB2024032275
and 5 more


Showing elements 1 - 20 out of 76