CVE-2025-33141CWE-497
CVE-2025-33141
Medium · published September 18, 2026
What it is
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00275 · 18.8th percentile
- Weakness
- CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Published
- 2026-09-18T20:17Z
References (1)
EPSS history
Timeline