PT-2025-26228 · Ibm · Ibm Qradar Siem

Ben Goodspeed + 5 · Published 2025-06-19 · Updated 2025-07-25 · CVE-2025-33117

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12

Description The issue allows a privileged user to modify configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands.

Recommendations For IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12, update to a newer version to avoid risks.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-07429

CVE-2025-33117

Affected Products

Ibm Qradar Siem

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-33117 · Security Note
• https://bdu.fstec.ru/vul/2025-07429 · Security Note
• https://osv.dev/vulnerability/CVE-2025-33117 · Vendor Advisory
• https://t.me/cvenotify/126169 · Telegram Post
• https://twitter.com/CVEnew/status/1935757718540751169 · Twitter Post
• https://ibm.com/support/pages/node/7237317 · Vendor Advisory, Patch
• https://twitter.com/TweetThreatNews/status/1936408938234191983 · Twitter Post
• https://t.me/cvetracker/26579 · Telegram Post
• https://twitter.com/dailycve/status/1948831693814513707 · Twitter Post
• https://twitter.com/CveFindCom/status/1935754299541262693 · Twitter Post
• https://t.me/latest_high_impact_cve/2722 · Telegram Post
• https://twitter.com/threatsbank/status/1936378815405580494 · Twitter Post