PT-2026-20250 · Ibm · Ibm Security Qradar Edr

Published 2026-02-17 · Updated 2026-02-17 · CVE-2025-36376

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security QRadar EDR versions 3.12 through 3.12.23

Description IBM Security QRadar EDR does not invalidate sessions after they expire. This could allow an authenticated user to impersonate another user on the system.

Recommendations Update IBM Security QRadar EDR to a version later than 3.12.23.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-36376

Affected Products

Ibm Security Qradar Edr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-36376 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36376 · Vendor Advisory
• https://ibm.com/support/pages/node/7260390 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2023901976791065017 · Twitter Post