← Back

CVE-2024-56464

nvd nist
Published: Dec 9, 2025Modified: Jun 17, 2026

JSON object

Loading...
2.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.2 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.

Affected (17)

Ibm
1 product
Qradar Security Information And Event Manager
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Qradar Security Information And Event Manager
Version 7.5.0
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_10
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_11
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_12
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_02
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_14
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_14_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_1
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_2
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_3
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_4
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_5
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_6
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_7
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_8

Related CWEs

CWE-548
Exposure of Information Through Directory Listing
A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.