CVE-2025-36377

IBM Security QRadar EDR Software has multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Security QRadar EDR	affected 3.12 through 3.12.23

CWE

CWE-613

References

https://www.ibm.com/support/pages/node/7260390

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.