CVE-2021-20429: IBM Qradar User Behavior Analytics

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.

Affected products

• IBM Qradar User Behavior Analytics: from 1.0.0, before 4.1.1 (fixed in 4.1.1)

Published 2021-05-14. Last modified 2026-06-17.