5.9
Medium
CVE-2021-38919 IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users
Description
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QRadar SIEM | 7.5.0 | No fix stated |
| QRadar SIEM | 7.4.3 | No fix stated |
| QRadar SIEM | 7.3.3 | No fix stated |
Other CVEs of QRadar SIEM
The 100 CVEs of QRadar SIEM →
CVE-2025-36051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files…
6.2
Medium
CVE-2025-15051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Medium
CVE-2026-1276
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Medium
CVE-2025-36138
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting
6.4
Medium