PT-2025-23629 · Ibm · Ibm Qradar Suite+1

Ben Goodspeed + 5 · Published 2025-06-03 · Updated 2025-08-12 · CVE-2025-25021

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue is related to the improper generation of code in case management script creation, which could allow a privileged user to execute code.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0, update to a version outside of this range to resolve the issue. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to case management script creation to minimize the risk of exploitation.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-10474

CVE-2025-25021

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 6

• https://bdu.fstec.ru/vul/2025-10474 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25021 · Security Note
• https://ibm.com/support/pages/node/7235432 · Vendor Advisory, Patch
• https://t.me/cveNotify/131953 · Telegram Post
• https://twitter.com/CVEnew/status/1929927226549535091 · Twitter Post