CVE-2025-33141— IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
Quick assessment
Affected
IBM QRadar
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-33141
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
Source: CVE Program / CVE List V5
Vulnerability Description
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
将系统数据暴露到未授权控制的范围
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2025-33141
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-33141
请登录查看更多情报信息。
Other References for CVE-2025-33141 (1)
Same Patch Batch · IBM · 2026-09-18 · 31 CVEs total
| CVE-2026-10747 | 10.0 CRITICAL | IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message p |
| CVE-2025-15399 | 10.0 CRITICAL | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a |
| CVE-2026-10858 | 9.9 CRITICAL | IBM MQ for HPE NonStop is vulnerable to a denial of service attack |
| CVE-2026-11381 | 8.8 HIGH | IBM MQ for HPE NonStop is vulnerable to a denial of service issue |
| CVE-2026-11378 | 8.8 HIGH | IBM MQ queue manager is vulnerable to remote code execution |
| CVE-2026-11375 | 8.8 HIGH | IBM MQ queue manager is vulnerable to remote code execution |
| CVE-2026-10575 | 8.8 HIGH | IBM MQ queue manager is vulnerable to remote code execution |
| CVE-2025-14754 | 8.8 HIGH | IBM Cloud Pak for Data is vulnerable to OS command injection |
| CVE-2026-10027 | 8.1 HIGH | IBM MQ queue manager is vulnerable to unauthenticated remote code execution |
| CVE-2026-10853 | 7.5 HIGH | IBM MQ queue manager is vulnerable to remote code execution |
| CVE-2025-14753 | 7.5 HIGH | IBM Cloud Pak for Data is vulnerable to path traversal |
| CVE-2026-10751 | 7.5 HIGH | IBM MQ Java messaging is vulnerable to remote code execution |
| CVE-2026-10744 | 7.5 HIGH | IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation |
| CVE-2026-10030 | 7.1 HIGH | IBM MQ Console is vulnerable to privilege escalation |
| CVE-2026-1025 | 6.1 MEDIUM | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a |
| CVE-2025-36147 | 6.1 MEDIUM | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to c |
| CVE-2026-1031 | 6.1 MEDIUM | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a |
| CVE-2026-1037 | 6.1 MEDIUM | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a |
| CVE-2025-36421 | 5.9 MEDIUM | Multiple vulnerabilities in IBM Controller |
| CVE-2025-33147 | 5.9 MEDIUM | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: QRadar
-
CVE-2026-5522
QRadar contains hard-coded credentials -
CVE-2026-10025
IBM QRadar SIEM has an XML External Entity (XXE) injection v -
CVE-2026-13477
IBM QRadar SIEM is vulnerable to remote code execution by pr -
CVE-2024-56462
IBM QRadar SIEM is vulnerable to using components with known -
CVE-2025-13995
IBM QRadar SIEM Information Disclosure
Same vendor: IBM
-
CVE-2026-11537
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5 -
CVE-2026-11381
IBM MQ for HPE NonStop is vulnerable to a denial of service -
CVE-2026-11378
IBM MQ queue manager is vulnerable to remote code execution -
CVE-2026-11375
IBM MQ queue manager is vulnerable to remote code execution -
CVE-2026-10858
IBM MQ for HPE NonStop is vulnerable to a denial of service
Same weakness: CWE-497
-
CVE-2026-27553
Information Disclosure via Schema Path Manipulation -
CVE-2026-38058
ST Engineering iDirect iQ-Series Terminals Exposure of Sensi -
CVE-2026-61911
The Cyrus Team Cyrus IMAP 信息泄露漏洞 -
CVE-2026-81394
Microsoft Excel Information Disclosure Vulnerability -
CVE-2026-81387
Microsoft Excel Information Disclosure Vulnerability
V. Comments for CVE-2025-33141
No comments yet