IBM QRadar SIEM 7.5.0 and its Update Packages up to Update Package 14 contain a flaw that lets an authenticated user who can access one tenant retrieve hostname data belonging to another tenant. This reveals system configuration details that could assist an attacker in further reconnaissance or lateral movement. The vulnerability is classified as CWE‑1286, representing unintended disclosure of sensitive information.

The affected product is IBM QRadar Security Information and Event Manager, version 7.5.0, including all incremental Update Packages 1 through 14. Installations of any of these builds are vulnerable; earlier releases or systems upgraded to Update Package 15 or later are not impacted.

The CVSS score of 5.0 indicates moderate severity, while the EPSS score of less than 1% signals a low likelihood of widespread exploitation. Based on the description, the attack requires legitimate access to one tenant, narrowing the risk to internal or privileged users. The vulnerability is not listed in the CISA KEV catalog and no public exploit is currently documented.