9.8

CVE-2026-10025

IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_1
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_10
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_11
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_12
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_13
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_13_interim_fix_01
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_13_interim_fix_02
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_14
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_14_interim_fix_01
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_14_interim_fix_02
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_15
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_15_interim_fix_01
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_15_interim_fix_02
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_15_interim_fix_03
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_15_interim_fix_04
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_2
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_3
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_4
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_5
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_6
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_7
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_8
Ibm ≫ Qradar Security Information And Event Manager Version7.5.0 Updateupdate_pack_9
Ibm ≫ Qradar Security Information And Event Manager Version7.6.0 Updatefix_pack_1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.276
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
IBM 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://www.ibm.com/support/pages/node/7282394
Vendor Advisory