CVE-2021-20393: IBM Qradar User Behavior Analytics

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001.

Affected products

• IBM Qradar User Behavior Analytics: from 1.0.0, before 4.1.1 (fixed in 4.1.1)

Published 2021-05-14. Last modified 2026-06-17.