CVE-2025-13995: IBM QRadar SIEM Information Disclosure
Published Mar 19, 2026
·Updated
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.
Affected Software
17 affected components
IBM QRadar SIEM>=7.5.0<=7.5.0 Update Package 14
All of the following
Any of the following
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_10
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_11
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_12
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_13
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_14
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_3
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_4
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_5
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_6
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_7
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_8
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_9
Linux Linux kernel
Remediation
Information
ProductVersionFixIBM QRadar SIEM 7.5.0 7.5.0 UP15 https://www.ibm.com/support/fixcentral/swg/selectFixes ( Release Notes https://www.ibm.com/support/pages/node/7257011 )
Event History
Mar 19, 2026
CVE Published
via MITRE·01:55 AM
Data Sourced
via MITRE·01:55 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-13995?
CVE-2025-13995 is considered a medium severity vulnerability.
2
How do I fix CVE-2025-13995?
To fix CVE-2025-13995, apply the latest security updates provided by IBM for QRadar SIEM.
3
What products are affected by CVE-2025-13995?
CVE-2025-13995 affects IBM QRadar SIEM version 7.5.0 through 7.5.0 Update Package 14.
4
What type of vulnerability is CVE-2025-13995?
CVE-2025-13995 is an information disclosure vulnerability.
5
Who can be impacted by CVE-2025-13995?
An attacker with access to one tenant can potentially access hostname data from another tenant's account in CVE-2025-13995.