Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 5

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.5.0 Update Pack 5
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 619
Public exploits: 37
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 5 IBM Qradar SIEM 7.5.0 Update Pack 5 is affected by 619 vulnerabilities: 5 critical, 66 high, 222 medium, 326 low Critical High Medium Low

Vulnerabilities (619)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198		 CWE-1286 High
No
No
 7.5.0 Update Pack 15 IF05 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199		 CWE-130 Medium
No
No
 7.5.0 Update Pack 15 IF05 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 7.5.0 Update Pack 15 IF05 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 17 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 7.5.0 Update Pack 15 IF05 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 7.5.0 Update Pack 15 IF05 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU125791 - Improper Check or Handling of Exceptional Conditions
CVE-2026-39304		 CWE-703 Medium
No
No
 7.5.0 Update Pack 15 IF05 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 6 more
#VU125790 - Integer overflow
CVE-2026-40046		 CWE-190 Medium
No
No
 7.5.0 Update Pack 15 IF05 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 4 more
#VU125787 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-34197		 CWE-94 Medium
Public exploit available
Exploited
 7.5.0 Update Pack 15 IF05 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227		 CWE-22 Low
No
No
 7.5.0 Update Pack 15 IF05 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 13 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 14 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 7.5.0 Update Pack 15 IF05 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU122779 - Memory corruption
CVE-2026-2006		 CWE-119 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 69 more
#VU122778 - Heap-based Buffer Overflow
CVE-2026-2005		 CWE-122 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122777 - Type confusion
CVE-2026-2004		 CWE-843 Medium
No
No
 7.5.0 Update Pack 15 IF05 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU87746 - Improper Authorization
CVE-2021-47154		 CWE-285 Medium
No
No
 7.5.0 Update Pack 15 IF05 22.03.2024 SB2024032269
SB2024032274
SB2024032275
and 5 more


Showing elements 1 - 20 out of 619