Skip to main content

Qradar Security Information And Event Manager CVE-2025-36050

| EUVDEUVD-2025-25799 MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2025-06-19 psirt@us.ibm.com
Information Disclosure IBM Qradar Security Information And Event Manager
6.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.2 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 15, 2026 - 00:08 euvd
EUVD-2025-25799
Analysis Generated
Mar 15, 2026 - 00:08 vuln.today
CVE Published
Jun 19, 2025 - 18:15 nvd
MEDIUM 6.2

DescriptionCVE.org

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.

Analysis

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user.

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Insertion of Sensitive Information into Log File (CWE-532).

RemediationAI

Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.

More in Qradar Security Information And Event Manager

View all
CVE-2025-33117 CRITICAL
9.1 Jun 19

IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 contains a privilege escalation vulnerability that allows a
CVE-2025-33121 HIGH
7.1 Jun 19

IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 contain an XML External Entity (XXE) injection vulnerabilit
CVE-2024-56463 MEDIUM
4.8 Feb 14

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. Rated medium severity (CVSS 4.8), this vulnerability is remot
CVE-2025-33119 MEDIUM
6.5 Nov 12

IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be rea
CVE-2025-0164 LOW
2.3 Sep 14

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unautho
CVE-2025-36042 MEDIUM
5.4 Aug 22

IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), thi
CVE-2025-33120 HIGH
7.8 Aug 22

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigure
CVE-2025-33118 MEDIUM
6.4 Aug 01

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. Rated medium severity (CV
CVE-2024-28786 MEDIUM
6.5 Jan 28

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2025-24984 MEDIUM
4.6
CVE-2026-22778 CRITICAL POC
9.8
CVE-2025-34183 CRITICAL POC
9.3
CVE-2020-36876 HIGH POC
8.7
CVE-2025-34188 HIGH POC
8.4
CVE-2026-22038 HIGH POC
8.1
CVE-2025-66411 HIGH POC
7.8
CVE-2026-22782 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Share

CVE-2025-36050 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy