PT-2025-23635 · Ibm · Ibm Qradar Suite+1

Ben Goodspeed + 5 · Published 2025-06-03 · Updated 2025-08-12 · CVE-2025-25020

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue allows an authenticated user to cause a denial of service due to improperly validating API data input.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0, update to a version outside of the affected range to resolve the issue. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of the affected range to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-1287

Related Identifiers

BDU:2025-10473

CVE-2025-25020

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-25020 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25020 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10473 · Security Note
• https://ibm.com/support/pages/node/7235432 · Vendor Advisory, Patch
• https://t.me/cveNotify/131952 · Telegram Post
• https://twitter.com/CVEnew/status/1929927224574058809 · Twitter Post