CVE-2022-36777: IBM Cloud Pak for Security information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-22 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obtain sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 233665.

Affected products

IBM Cloud Pak for Security: from 1.10.0.0 through 1.10.11.0
IBM Qradar Suite: from 1.10.12.0 before 1.10.17.0 — fixed in 1.10.17.0

How to fix

Upgrade to a fixed version: IBM Qradar Suite 1.10.17.0. Check the vendor advisory for mitigations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/233665
https://www.ibm.com/support/pages/node/7080058
https://exchange.xforce.ibmcloud.com/vulnerabilities/233665
https://www.ibm.com/support/pages/node/7080058

Get alerted when CVE-2022-36777 or the next vulnerability affects your stack