Stored Cross-Site Scripting Vulnerability in IBM QRadar SIEM
CVE-2025-36138

6.4MEDIUM

Key Information:

Vendor

IBM
Status
Qradar Siem
Vendor
CVE Published:
27 October 2025

What is CVE-2025-36138?

IBM QRadar SIEM versions up to 7.5.0 Update Pack 13 Independent Fix 02 are susceptible to a stored cross-site scripting intrusion. This security flaw allows authenticated users to inject arbitrary JavaScript code into the application’s Web UI. Exploiting this vulnerability can significantly compromise the security of user sessions, potentially leading to unauthorized access and the disclosure of sensitive credentials in a trusted environment.

Affected Version(s)

QRadar SIEM 7.5.0 <= 7.5.0 Update Pack 13

References

https://www.ibm.com/support/pages/node/7249278
vendor-advisorypatch

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Fahimhusain Raydurg
JSON
.
CVE-2025-36138 : Stored Cross-Site Scripting Vulnerability in IBM QRadar SIEM