CVE-2025-33119CWE-260

CVE-2025-33119

Medium · published November 13, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
16.2
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.2th percentile
Weakness
CWE-260 · Password in Configuration File
Published
2025-11-13T03:15Z
Affected products (17)
ProductVersionsFixed in
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
ibm/qradar_security_information_and_event_managerall versions—
References (1)
https://www.ibm.com/support/pages/node/7250932 · [email protected]
EPSS history
Timeline
  • 12 NOV 21:19Z
    IBM QRadar SIEM Information Disclosure
    cvelistv5