CVE-2025-36051

CWE-5384 documents4 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 98.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar SiemIBM Qradar Security Information AND Event Manager
Timeline
PublishedMar 19

Description

IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.5 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem7.5.0 — 7.5.0 Update Pack 14

🔴Vulnerability Details

2
CVEList
IBM QRadar SIEM Information Disclosure↗2026-03-19
▶
GHSA
GHSA-596f-f6g3-vvmj: IBM QRadar SIEM 7↗2026-03-19
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-36051 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-36051 (MEDIUM CVSS 5.5) | IBM QRadar SIEM 7.5.0 through 7.5.0 | cvebase.io