Skip to content
Sign in
5.4 Medium

CVE-2025-36042 IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting

Description

IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
QRadar SIEM 7.5 7.5 → latest No fix stated

Other CVEs of QRadar SIEM

The 100 CVEs of QRadar SIEM →
CVE-2025-36051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files… 6.2 Medium CVE-2025-15051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium CVE-2026-1276 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium CVE-2025-36138 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting 6.4 Medium
Track this CVE