5

CVE-2025-13995

IBM QRadar SIEM Information Disclosure

IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update -
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_1
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_10
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_11
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_12
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_13
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_14
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_2
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_3
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_4
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_5
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_6
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_7
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_8
   Linux ≫ Linux Kernel Version -
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_9
   Linux ≫ Linux Kernel Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.077
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 5 3.1 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CWE-1286 Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

https://www.ibm.com/support/pages/node/7266709
Vendor Advisory