IBM QRadar SIEM
Moderate fix1 remedy
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 7.5, <= 7.5.0 UP12 IF01
IBM QRadar SIEM Privileged User Arbitrary Command Execution Vulnerability via Malicious Autoupdate File
Vulnerability
Patched
A vulnerability in IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 could allow a privileged user to alter configuration files. This modification could facilitate the upload of a harmful autoupdate file, which would execute arbitrary commands on the system.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of commands with elevated privileges.
Remediation
Users are advised to update to IBM QRadar SIEM version 7.5.0 Update Package 12 Interim Fix 02.
Added: Jun 19, 2025, 6:23 PM
Updated: Jun 19, 2025, 6:23 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
7.5exploitability
3.0remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.