WID-SEC-W-2025-1888

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM QRadar SIEM: Mehrere Schwachstellen

view advisory published 2025-08-21

Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Berechtigungen zu erweitern und Cross-Site-Scripting-Angriffe durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-36042US——
IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI…
CVE-2025-33120US——
IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan