cloud pak for security vulnerabilities and fixes
Recent CVEs affecting cloud pak for security, with upgrade or downgrade steps. 11 tracked.
Also searched as: cloudpakforsecurity.
cloud pak for security has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-06-03. Highest priority: CVE-2025-25022 (score 40/100).
- CVE-2025-25022 CRITICAL 9.6 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0
- CVE-2025-25021 HIGH 7.2 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0
- CVE-2025-25020 MEDIUM 6.5 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0
- CVE-2025-25019 MEDIUM 4.8 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0
- CVE-2025-1334 MEDIUM 4.0 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0
- CVE-2024-28799 MEDIUM 5.6 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.
- CVE-2024-25024 MEDIUM 5.5 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.
- CVE-2024-25023 MEDIUM 5.5 UPGRADE UPGRADE IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.
- CVE-2023-47728 MEDIUM 6.5 UPGRADE UPGRADE IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.
- CVE-2022-38383 MEDIUM 4.0 UPGRADE UPGRADE IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1
- CVE-2022-38382 MEDIUM 4.7 UPGRADE UPGRADE IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1
FAQ
How do I fix cloud pak for security vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cloud pak for security being exploited right now?
None of the tracked cloud pak for security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cloud pak for security CVE should I patch first?
CVE-2025-25022 currently ranks highest (40/100): IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0.