VULNERABILITY INTELLIGENCE

CVE-2025-25022

CVSS score9.6 CRITICAL
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-06-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.

Weakness classification

  • psirt@us.ibm.com: CWE-260

Primary references