IBM QRadar SIEM Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting vulnerability has been identified in IBM QRadar SIEM versions 7.5.0 through 7.5.0 Update Package 14. This issue allows users to inject arbitrary JavaScript into the Web UI, potentially disrupting normal functionality.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected JavaScript could be executed in the context of the user's browser.

Remediation

Users are advised to update to IBM QRadar SIEM version 7.5.0 Update Package 15. Instructions for downloading this update are available on the IBM Support Fix Central website.

Added: Mar 19, 2026, 3:19 AM
Updated: Mar 19, 2026, 3:19 AM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
1.7
exploitability
3.2
remediation
7.7
relevance
4.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.