QRadar EDR vulnerabilities

3 known vulnerabilities in QRadar EDR from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Security QRadar EDR: Inadequate Encryption Strength

  CVE-2025-36379Feb 17, 2026IBM

  IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

• 8.8 High severity

  IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session…

  CVE-2025-36377Feb 17, 2026IBM

  IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.

• 7.5 High severity

  QRadar EDR: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2024-45643Mar 14, 2025IBM

  IBM Security QRadar 3.12 EDR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive credential information.