CVE-2017-1695: IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker...

Security readout for executives and security teams

IBM QRadar SIEM 7.2 and 7.3 used weaker cryptography than expected. If exploited, an attacker could decrypt highly sensitive information handled by the SIEM. The issue is medium severity because exploitation requires high attack complexity, but the confidentiality impact is high. Exposure is likely limited to organizations still running IBM QRadar SIEM 7.2 or 7.3, especially where affected services are network reachable. The provided sources do not identify specific components, configurations, or affected cryptographic algorithms. Treat this as a targeted confidentiality risk for legacy QRadar environments. It is not rated critical and has no cited active exploitation, but SIEM data can contain sensitive security and business information, so remediation should be tracked to closure. Mitigation focus: Identify all IBM QRadar SIEM 7.2 and 7.3 deployments.; Review IBM advisory and X-Force entry for the supported remediation path.; Apply IBM-provided fixes or upgrade guidance where applicable..

Prepared

May 25, 2026, 05:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.