PT-2026-20251 · Ibm · Ibm Security Qradar Edr

Published 2026-02-17 · Updated 2026-02-18 · CVE-2025-36377

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security QRadar EDR versions 3.12 through 3.12.23

Description IBM Security QRadar EDR does not invalidate sessions after they expire. This could allow an authenticated user to impersonate another user on the system.

Recommendations Update IBM Security QRadar EDR to a version later than 3.12.23.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-36377

Affected Products

Ibm Security Qradar Edr

References · 6

• https://osv.dev/vulnerability/CVE-2025-36377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36377 · Security Note
• https://twitter.com/VulmonFeeds/status/2023944015234642193 · Twitter Post
• https://t.me/CVEtracker/44905 · Telegram Post
• https://ibm.com/support/pages/node/7260390 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2023901978640687167 · Twitter Post