High severity · published Jun 3, 2025
CVE-2025-25022
IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cloud Pak for Security · IBM
1.10.0.0 through 1.10.11.0 · source: vendor, NVD
QS
QRadar Suite Software · IBM
1.10.12.0 through 1.11.2.0 · source: vendor
QS
Qradar Suite · Ibm
1.10.12.0 through 1.11.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-25022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-25022
Vendor Advisory
https://www.ibm.com/support/pages/node/7235432
More from Cloud Pak for Security
9.8
CVE-2021-20578
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls
9.1
CVE-2021-20538
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect…
9.0
CVE-2020-4627
IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection
8.8
CVE-2023-47726
IBM QRadar Suite improper input validation
8.8
CVE-2022-38387
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted…