Skip to main content

Security Qradar Edr CVE-2025-36376

MEDIUM
Insufficient Session Expiration (CWE-613)
2026-02-17 psirt@us.ibm.com
6.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Feb 17, 2026 - 21:22 nvd
MEDIUM 6.3

DescriptionCVE.org

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.

AnalysisAI

Security Qradar Edr versions up to 3.12.23 is affected by insufficient session expiration (CVSS 6.3).

Technical ContextAI

This vulnerability (CWE-613: Insufficient Session Expiration) affects Security Qradar Edr. IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

CVE-2023-33861 MEDIUM
6.5 May 20

IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication pat

CVE-2024-45641 MEDIUM
6.5 May 20

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate val

CVE-2024-45643 MEDIUM
5.9 Mar 14

IBM Security QRadar 3.12 EDR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt

CVE-2024-45642 MEDIUM
5.3 Nov 14

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.3), this vulnerability is

CVE-2024-45099 MEDIUM
4.8 Nov 14

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. Rated medium severity (CVSS 4.8), this vulnerability is

CVE-2024-45644 MEDIUM
4.7 Mar 19

IBM Security ReaQta 3.12 allows a privileged user to upload or transfer files of dangerous types that can be automatical

CVE-2024-45636 MEDIUM
4.4 Jun 11

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg

CVE-2024-45638 MEDIUM
4.1 Mar 14

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user. Rated m

CVE-2024-45654 MEDIUM
4.3 Jan 19

IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted

CVE-2024-45640 MEDIUM
5.3 Jan 07

IBM Security ReaQta 3.12 returns sensitive information in an HTTP response that could be used in further attacks against

CVE-2024-45100 MEDIUM
4.9 Jan 07

IBM Security ReaQta 3.12 could allow a privileged user to cause a denial of service by sending multiple administration r

Share

CVE-2025-36376 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy