PT-2025-44011 · Ibm · Ibm Qradar Siem

Published 2025-10-27 · Updated 2025-11-24 · CVE-2025-36007

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02

Description IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 contains a flaw related to improper privilege assignment to an update script, which could allow for privilege escalation.

Recommendations Apply updates to address the improper privilege assignment in the update script.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2025-16371

CVE-2025-36007

Affected Products

Ibm Qradar Siem

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36007 · Security Note
• https://bdu.fstec.ru/vul/2025-16371 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36007 · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/1992865866413744554 · Twitter Post
• https://ibm.com/support/pages/node/7249277 · Patch, Vendor Advisory
• https://t.me/CVEtracker/35873 · Telegram Post