{"id":"CVE-2025-25022","aliases":["EUVD-2025-16758","GHSA-jqjr-322m-7mjw"],"status":"published","title":"IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00318,"percentile":0.24999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-260"],"published":"2025-06-03T15:16:19Z","modified":"2026-06-17T09:00:09Z","products":[{"vendor":"ibm","product":"cloud pak for security"},{"vendor":"ibm","product":"cloud_pak_for_security"},{"vendor":"ibm","product":"qradar suite software"},{"vendor":"ibm","product":"qradar_suite"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7235432","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25022"},{"url":"https://github.com/advisories/GHSA-jqjr-322m-7mjw"}],"sources":{"cve":[{"id":"CVE-2025-25022","title":"IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.","status":"published","published":"2025-06-03T15:16:19.691Z","modified":"2026-02-26T18:27:38.077Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-260"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-16758","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.","status":"published","published":"2025-06-03T15:16:19Z","modified":"2026-02-26T18:27:38Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:18.619892Z"}],"ghsa":[{"id":"GHSA-jqjr-322m-7mjw","title":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0...","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.","status":"published","published":"2025-06-03T18:30:41Z","modified":"2025-06-03T18:30:52Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-260"],"updated_at":"2026-11-02T15:02:33.2389Z"}],"nvd":[{"id":"CVE-2025-25022","description":"IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.","status":"published","published":"2025-06-03T16:15:24.437Z","modified":"2026-06-17T09:00:09.183Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-260"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}