Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM QRadar SIEM — ibm.com/support/pages/node/7237317 Clear all filters
TI-2025-24092 CVE-2025-33117 · GHSA-cmvv-rx7c-4vmx

IBM QRadar SIEM command execution

Priority MEDIUM 42

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00552 Published 2025-06-19 No fix listed CWE-73
TI-2025-24096 CVE-2025-33121 · GHSA-wv75-vg2r-ppj6

IBM QRadar SIEM XML external entity injection

Priority LOW 32

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00481 Published 2025-06-19 No fix listed CWE-611
TI-2025-24657 CVE-2025-36050 · GHSA-cw4r-p223-gfc3

IBM QRadar SIEM information disclosure

Priority LOW 27

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00167 Published 2025-06-19 No fix listed CWE-532