IBM QRadar SIEM <7.5.0 UP14 IF03

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high2medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-5318US	—	1.84% (79th)	—	no fix	2025-06-24	—
CVE-2025-59375US	—	1.38% (72nd)	—	no fix	2025-09-15	—
CVE-2025-5372US	high8.8	0.50% (43rd)	—	no fix	2025-07-04	—
CVE-2025-4878US	—	0.23% (13th)	—	no fix	2025-07-22	—
CVE-2025-4877US	—	0.20% (10th)	—	no fix	2025-08-20	—
CVE-2025-39869US	high7.1	0.16% (6th)	—	no fix	2025-09-23	—
CVE-2025-39883US	high7.1	0.16% (5th)	—	no fix	2025-09-23	—
CVE-2025-39876US	medium5.5	0.15% (4th)	—	no fix	2025-09-23	—
CVE-2025-39885US	medium5.5	0.12% (2nd)	—	no fix	2025-09-23	—

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read3 CVEs
CWE-416Use After Free2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-457Use of Uninitialized Variable1 CVEs
CWE-465CWE-4651 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-667Improper Locking1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.