CVE-2025-36377 — IBM Security QRadar EDR Software has multiple vulnerabilities
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the sy…
Published: 2026-02-17 · CVSS: 6.3 · CVSS 3.1
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7