PT-2025-44013 · Ibm · Ibm Qradar Siem

Fahimhusain Raydurg · Publicado 2025-10-27 · Atualizado 2025-10-27 · CVE-2025-36170

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02

Description IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is susceptible to stored cross-site scripting. An authenticated user can inject arbitrary JavaScript code into the Web UI, potentially modifying the intended functionality and leading to credentials disclosure within a trusted session. The vulnerability allows for the embedding of malicious scripts that can be executed when other users access the affected interface.

Recommendations Update IBM QRadar SIEM to a version beyond 7.5.0 Update Pack 13 Independent Fix 02.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-16369

CVE-2025-36170

Produtos afetados

Ibm Qradar Siem

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36170 · Nota de Segurança
• https://t.me/CVEtracker/35875 · Publicação no Telegram
• https://ibm.com/support/pages/node/7249278 · Correção, Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-16369 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-36170 · Aviso do Fabricante