Directory Traversal Vulnerability in IBM QRadar SOAR Plugin App
CVE-2025-36114

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Qradar Soar Plugin App
Vendor
CVE Published:
20 August 2025

What is CVE-2025-36114?

The IBM QRadar SOAR Plugin App versions 1.0.0 through 5.6.0 are susceptible to a directory traversal vulnerability, allowing remote attackers to access files outside the intended directory structure. By crafting a malicious URL with 'dot dot' sequences, attackers can manipulate the server to reveal restricted files on the system, potentially leading to unauthorized data exposure. It's crucial for affected users to apply the necessary patches provided by IBM to mitigate this risk.

Affected Version(s)

QRadar SOAR Plugin App 1.0 <= 5.6.0

References

https://www.ibm.com/support/pages/node/7242664
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Baha Doumi
.
CVE-2025-36114 : Directory Traversal Vulnerability in IBM QRadar SOAR Plugin App