{"id":"CVE-2024-56464","aliases":["EUVD-2024-55311","GHSA-gjcg-7h9q-q3rg"],"status":"published","title":"IBM QRadar SIEM is affected by an information disclosure vulnerability","description":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00317,"percentile":0.24902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-548"],"published":"2025-12-09T13:26:15Z","modified":"2026-10-02T00:10:00Z","products":[{"vendor":"ibm","product":"ibm qradar siem"},{"vendor":"ibm","product":"qradar_security_information_and_event_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7253664","tags":["vendor-advisory","patch","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56464"},{"url":"https://github.com/advisories/GHSA-gjcg-7h9q-q3rg"}],"sources":{"cve":[{"id":"CVE-2024-56464","title":"IBM QRadar SIEM is affected by an information disclosure vulnerability","description":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.","status":"published","published":"2025-12-09T13:26:15.979Z","modified":"2025-12-09T14:36:32.867Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-548"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-55311","description":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.","status":"published","published":"2025-12-09T13:26:15Z","modified":"2025-12-09T14:36:32Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:49:08.541096Z"}],"ghsa":[{"id":"GHSA-gjcg-7h9q-q3rg","title":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability...","description":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.","status":"published","published":"2025-12-09T18:30:34Z","modified":"2025-12-09T18:30:40Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-548"],"updated_at":"2026-11-02T15:05:06.487163Z"}],"nvd":[{"id":"CVE-2024-56464","description":"IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.","status":"published","published":"2025-12-09T16:17:28.403Z","modified":"2026-10-02T00:10:00.18Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-548"],"updated_at":"2026-11-02T14:10:47.444899Z"}]}}