Home

Description

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code.

PUBLISHED Reserved 2025-01-31 | Published 2025-06-03 | Updated 2026-02-26 | Assigner ibm




HIGH: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status
unaffected

1.10.12.0 (semver)
affected

Default status
unaffected

1.10.0.0 (semver)
affected

Credits

John Zuccato, Rodney Ryan, Chris Shepherd, Vince Dragnea, Ben Goodspeed, Dawid Bak finder

References

www.ibm.com/support/pages/node/7235432 vendor-advisory patch

cve.org (CVE-2025-25021)

nvd.nist.gov (CVE-2025-25021)

Download JSON