Vulnerability · Published Jun 19, 2025 · Assigned by ibm
CVE-2025-33117IBM QRadar SIEM command execution
Critical 9.1
In plain English
A critical-severity security flaw in QRadar SIEM from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.6%top 53.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | QRadar SIEM | 7.5 – through 7.5.0 Update Pack 12 |
Weakness: CWE-73 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7237317 vendor-advisory, patch