CVE-2025-13995

Published: Mar 19, 2026Modified: Jun 17, 2026

5.0

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Exploitability: 3.1 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.

Affected (15)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

15 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.5.0
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_10
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_11
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_12
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_13
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_14
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_4
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_5
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_6
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_7
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_8
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_9

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-1286

Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

References (1)

https://www.ibm.com/support/pages/node/7266709

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.