CVE-2016-9750: IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated...

Security readout for executives and security teams

Affected IBM QRadar deployments may store user credentials in readable text. Someone with authenticated QRadar access could read those credentials, creating a serious insider or post-compromise risk. The provided sources do not show active exploitation or name a specific fix. Exposure is limited to organizations running IBM QRadar SIEM 7.2 or 7.3. Risk depends on who has authenticated access and what credentials QRadar stores in the affected deployment. Prioritize remediation where QRadar stores privileged credentials or is accessible by many users. This is not shown as actively exploited, but credential exposure in a SIEM can materially increase breach impact. Mitigation focus: Check IBM advisory swg22003137 for vendor remediation guidance.; Identify and prioritize QRadar 7.2 and 7.3 systems.; Restrict QRadar authenticated access to required administrators only..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.