Severity
High
Analysis Summary
CVE-2025-33117 CVSS:9.1
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.
CVE-2025-33121 CVSS:7.1
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVE-2025-36050 CVSS:6.2
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.
Impact
- Gain Access
- Information Disclosure
Indicators of Compromise
CVE
CVE-2025-33117
CVE-2025-33121
CVE-2025-36050
Affected Vendors
- IBM
Affected Products
- IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF01
Remediation
Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.