CVE-2021-38936 IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user

Description

IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893.

Affected products and versions

Product	Affected versions	Fixed in
QRadar SIEM 7.5	7.5.0.UpdatePack1 → 7.5.0	No fix stated
QRadar SIEM 7.4	7.4.0 → 7.4.3.FixPack5	No fix stated
QRadar SIEM 7.3	7.3.0 → 7.3.3.FixPack11	No fix stated

Other CVEs of QRadar SIEM

The 100 CVEs of QRadar SIEM →

CVE-2025-36051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files… 6.2 Medium CVE-2025-15051 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium CVE-2026-1276 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting 5.4 Medium CVE-2025-36138 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting 6.4 Medium