IBM Qradar Suite vulnerabilities

23 CVEs affecting IBM Qradar Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-25022, published 2025-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-25021, published 2025-06-03. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the…
CVE-2022-36777, published 2023-11-22. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obtain sensitive version information that…
CVE-2022-38386, published 2024-05-01. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow…
CVE-2023-47728, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical…
CVE-2025-25020, published 2025-06-03. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly…
CVE-2024-22355, published 2024-03-03. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it…
CVE-2023-50951, published 2024-02-17. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive information about invalid authorization attempts. …
CVE-2023-47726, published 2024-06-18. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to…
CVE-2024-28782, published 2024-04-03. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user.…
CVE-2023-47727, published 2024-05-02. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input…

Latest

CVE-2025-25022, published 2025-06-03. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive…
CVE-2025-25019, published 2025-06-03. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate…
CVE-2025-1334, published 2025-06-03. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.
CVE-2024-25024, published 2024-08-15. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM…
CVE-2024-28799, published 2024-08-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 displays sensitive data improperly to a local privileged user, in non default…
CVE-2022-38382, published 2024-08-13. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated…
CVE-2024-25023, published 2024-07-10. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 stores potentially sensitive information in log files that could be read by a local…