CVE-2025-36007

HIGH

7.8

Descripcion

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado10/27/2025

Ultima modificacion12/15/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

ibm:qradar_security_information_and_event_manager

Debilidades (CWE)

CWE-266

Referencias

https://www.ibm.com/support/pages/node/7249277(psirt@us.ibm.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.