SOAR QRadar Plugin App vulnerabilities

2 known vulnerabilities in SOAR QRadar Plugin App from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  QRadar SOAR Plugin App: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-36114Aug 20, 2025IBM

  IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

• 8.8 High severity

  SOAR QRadar Plugin App: Improper Access Control

  CVE-2023-38263Feb 2, 2024IBM

  IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577.