CVE-2025-33118

CVE-2025-33118 affects IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 with a stored cross-site scripting (XSS) in the Web UI, allowing authenticated users to inject JavaScript and potentially disclose credentials in a trusted session. Remediation per IBM is to upgrade to QRadar SIEM 7.5.0 UP13 ...

The vulnerability of the IBM QRadar SIEM system’s event collection and analysis process is related to improper restrictions on XML links to external objects. This allows attackers to disclose sensitive information or exploit memory resources.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information or utilize memory resources...