CVE-2025-13995

EUVD-2025-208850
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
ibmqradar_security_information_and_event_manager
7.5.0
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_1
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_10
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_11
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_12
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_13
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_14
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_2
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_3
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_4
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_5
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_6
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_7
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_8
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_9
𝑥
= Vulnerable software versions