CVE-2025-36051: IBM QRadar SIEM Information Disclosure
Published Mar 19, 2026
·Updated
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
Affected Software
17 affected components
IBM QRadar SIEM>=7.5.0<=7.5.0 Update Package 14
All of the following
Any of the following
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_10
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_11
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_12
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_13
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_14
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_3
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_4
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_5
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_6
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_7
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_8
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_9
Linux Linux kernel
Remediation
Information
ProductVersionFixIBM QRadar SIEM 7.5.0 7.5.0 UP15 https://www.ibm.com/support/fixcentral/swg/selectFixes ( Release Notes https://www.ibm.com/support/pages/node/7257011 )
Event History
Mar 19, 2026
CVE Published
via MITRE·01:55 AM
Data Sourced
via MITRE·01:55 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-36051?
CVE-2025-36051 has a moderate severity rating due to the potential information disclosure risk.
2
How do I fix CVE-2025-36051?
To fix CVE-2025-36051, update IBM QRadar SIEM to a version higher than 7.5.0 Update Package 14.
3
What information is disclosed in CVE-2025-36051?
CVE-2025-36051 allows local users to read sensitive configuration data stored in the system.
4
Who is affected by CVE-2025-36051?
Users of IBM QRadar SIEM versions from 7.5.0 up to 7.5.0 Update Package 14 are affected by this vulnerability.
5
Is there a workaround for CVE-2025-36051?
There is no documented workaround for CVE-2025-36051; updating the software is the recommended action.