CVE-2025-36050

CWE-532 — Log File Information Exposure3 documents3 sources
Severity
6.2MEDIUM
EPSS
0.0%
top 94.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar SiemIBM Qradar Security Information AND Event Manager
Timeline
PublishedJun 19

Description

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.5 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem7.5 — 7.5.0 Update Pack 12

🔴Vulnerability Details

2
CVEList
IBM QRadar SIEM information disclosure↗2025-06-19
▶
GHSA
GHSA-cw4r-p223-gfc3: IBM QRadar SIEM 7↗2025-06-19
▶
CVE-2025-36050 (MEDIUM CVSS 6.2) | IBM QRadar SIEM 7.5 through 7.5.0 U | cvebase.io