← Back

CVE-2025-36007

nvd nist
Published: Oct 27, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

Affected (16)

Ibm
1 product
Qradar Security Information And Event Manager
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Qradar Security Information And Event Manager
Version 7.5.0
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_10
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_11
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_12
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_02
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_1
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_2
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_3
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_4
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_5
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_6
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_7
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_8
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_9

Related CWEs

CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.