{"id":"CVE-2025-1334","aliases":["EUVD-2025-16760","GHSA-ggcg-qqqw-c8ff"],"status":"published","title":"IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0018,"percentile":0.07609,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-525"],"published":"2025-06-03T15:18:40Z","modified":"2026-06-17T08:38:56Z","products":[{"vendor":"ibm","product":"cloud pak for security"},{"vendor":"ibm","product":"cloud_pak_for_security"},{"vendor":"ibm","product":"qradar suite software"},{"vendor":"ibm","product":"qradar_suite"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7235432","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1334"},{"url":"https://github.com/advisories/GHSA-ggcg-qqqw-c8ff"}],"sources":{"cve":[{"id":"CVE-2025-1334","title":"IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.","status":"published","published":"2025-06-03T15:18:40.596Z","modified":"2025-08-24T11:59:40.522Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T14:32:49.824855Z"}],"euvd":[{"id":"EUVD-2025-16760","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.","status":"published","published":"2025-06-03T15:18:40Z","modified":"2025-08-24T11:59:40Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:54.001843Z"}],"ghsa":[{"id":"GHSA-ggcg-qqqw-c8ff","title":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0...","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.","status":"published","published":"2025-06-03T18:30:41Z","modified":"2025-06-03T18:30:52Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T15:02:33.2389Z"}],"nvd":[{"id":"CVE-2025-1334","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.","status":"published","published":"2025-06-03T16:15:22.983Z","modified":"2026-06-17T08:38:56.45Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}
