CVE-2025-25020

IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation

State
Published
Severity
6.5 Medium
Published
Jun 3, 2025
Updated
Aug 24, 2025
Reserved
Jan 31, 2025

Read the record on cve.org

Description

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly validating API data input.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hibm

Weaknesses

  • CWE-1287 Improper Validation of Specified Type of Input

Affected Products

ProductVersions
QRadar Suite SoftwareIBM
  • 1.10.12.0 through 1.11.2.0Affected
Cloud Pak for SecurityIBM
  • 1.10.0.0 through 1.10.11.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.