Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-33097

IBM QRadar SIEM cross-site scripting

Description

IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM QRadar SIEM

Default version status: unaffected

  • 7.5, to ≤ 7.5.0 Update Pack 12affected

References