IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• ibm qradar incident forensics7.2.0
• ibm qradar incident forensics7.2.1
• ibm qradar incident forensics7.2.2
• ibm qradar incident forensics7.2.3
• ibm qradar incident forensics7.2.4
• ibm qradar incident forensics7.2.5
• ibm qradar incident forensics7.2.6
• ibm qradar incident forensics7.2.7
• ibm qradar incident forensics7.2.8
• ibm qradar security information and event manager7.2.0
• ibm qradar security information and event manager7.2.1
• ibm qradar security information and event manager7.2.2
• ibm qradar security information and event manager7.2.3
• ibm qradar security information and event manager7.2.4
• ibm qradar security information and event manager7.2.5
• ibm qradar security information and event manager7.2.6
• ibm qradar security information and event manager7.2.7
• ibm qradar security information and event manager7.2.8

Versions reported by the vendor

Affected version ranges reported by the assigning authority (ibm). Independent of NVD's CPE analysis and usually ahead of it.

• IBM Corporation QRadar SIEM

  • 7.1 MR1, 7.1, 7.0, 7.2, 7.1 MR2, 7, 7.2.3affected

Other highest-scoring records for the same primary product.

• CVE-2016-9726IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system.
  36Monitor
• CVE-2025-33120IBM QRadar SIEM privilege escalation
  31Monitor
• CVE-2018-1648IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info
  30Monitor
• CVE-2018-1647IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthen
  30Monitor
• CVE-2017-1622IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate.
  29Monitor
• CVE-2018-1649IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system.
  27Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.