CVE-2025-25020 MEDIUM

CVE-2025-25020: IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation

Vendor Ibm
Product QRadar Suite Software
Weakness CWE-1287
Published June 3, 2025
Last update August 24, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly validating API data input.

Key dates

02Disclosure timeline

June 3, 2025 CVE published
August 24, 2025 Record updated