CVE-2025-33120

CWE-2503 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 97.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Qradar SiemIBM Qradar Incident ForensicsIBM Qradar Security Information AND Event Manager
Timeline
PublishedAug 22

Description

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5ibm/qradar_siem7.5 — 7.5.0 Update Pack 13

🔴Vulnerability Details

2
CVEList
IBM QRadar SIEM privilege escalation↗2025-08-22
▶
GHSA
GHSA-67f9-x324-v6v2: IBM QRadar SIEM 7↗2025-08-22
▶