High severity · published Oct 27, 2025
CVE-2025-36007
IBM QRadar SIEM incorrect privilege assignment
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
QRadar SIEM · IBM
7.5.0 through 7.5.0 UP13 IF02 · source: vendor
QS
Qradar Security Information And Event Manager · Ibm
7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; 7.5.0; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-36007
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-36007
Vendor Advisory
https://www.ibm.com/support/pages/node/7249277
More from QRadar SIEM
7.5
CVE-2022-22480
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure
7.5
CVE-2017-1695
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
6.8
CVE-2024-27269
IBM QRadar SIEM information disclosure
5.5
CVE-2022-30613
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user
5.4
CVE-2025-36138
IBM QRadar SIEM cross-site scripting