CVE-2021-39088

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
IBM	QRadar SIEM	7.3; 7.4; 7.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/216111VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6607129Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/216111VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6607129Patch, Vendor Advisory

Timeline

Published: Jul 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-390896.5IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow an authenticated user to obtain sensitive information from a special CVE-2021-39097.5OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Spe CVE-2021-390905.9IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow a remote attacker to obtain sensitive information, caused by the fai CVE-2021-39107.5OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).CVE-2021-391097.5The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path tra CVE-2021-39116.5If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.CVE-2021-391116.1The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before CVE-2021-391124.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapp CVE-2021-391137.5Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after lo CVE-2021-391148.8Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data Center instance to ex CVE-2021-391157.2Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to ex CVE-2021-391165.5Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of S