What is the CVSS score of CVE-2025-25021?

CVE-2025-25021 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Cloud Pak For Security are affected by CVE-2025-25021?

IBM QRadar Suite and Cloud Pak for Security deployments are vulnerable to privileged code execution through case management script creation, potentially allowing authenticated attackers to compromise…

How to fix or mitigate CVE-2025-25021?

24 hours: Inventory all IBM QRadar and Cloud Pak for Security instances and identify those running versions 1.10.12.0-1.11.2.0 or 1.10.0.0-1.10.11.0; restrict administrative access to case management functionality to essential personnel only. 7 days: Implement network segmentation to limit lateral movement from compromised QRadar instances; enable enhanced logging and monitoring on script creation activities. 30 days: Prioritize upgrade to patched versions when available; monitor IBM security advisories weekly for patch release; conduct access review of privileged accounts with case management permissions.

Cloud Pak For Security CVE-2025-25021

EUVD-2025-16759 HIGH

Code Injection (CWE-94)

2025-06-03 psirt@us.ibm.com

Privilege Escalation RCE IBM Cloud Pak For Security Qradar Suite

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 17:04 euvd

EUVD-2025-16759

Analysis Generated

Mar 14, 2026 - 17:04 vuln.today

CVE Published

Jun 03, 2025 - 16:15 nvd

HIGH 7.2

DescriptionCVE.org

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code.

AnalysisAI

CVE-2025-25021 is a security vulnerability (CVSS 7.2) that allows a privileged execute code. High severity vulnerability requiring prompt remediation.