Skip to content
OpenAdvisories
High · 8.1 CVE-2026-105467 EUVD-2026-119698GHSA-5fr5-7cp5-qp97

IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: QRadar

Description

IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Reflected XSS. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.

Affected products

VendorProductAffectedFixed
IBM QRadar 7.5.0 – ≤ 7.5.0 Update Pack 16 Interim Fix 02, 7.6.0.0 – ≤ 7.6.0.5 —

Advisories 1

References