Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

IBM QRadar SIEM and User Entity Behavior Analytics App Vulnerabilities Identified IBM QRadar SIEM and its User Entity Behavior Analytics App have been identified as vulnerable due to components with known vulnerabilities. The vulnerabilities are assigned CVE IDs CVE-2025-64720 and CVE-2025-56200, both with a CVSS Base score of 7.5, indicating a high severity level. Affected users should take immediate action to mitigate potential risks. 2 sources 39