IBM Soar Qradar Plugin App vulnerabilities

4 CVEs affecting IBM Soar Qradar Plugin App, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36114, published 2025-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-38019, published 2024-02-02. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences…
CVE-2025-36114, published 2025-08-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot"…
CVE-2023-38263, published 2024-02-02. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577.
CVE-2023-38020, published 2024-02-02. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate output written to log files. IBM X-Force ID: 260576.