CVE-2021-38869: IBM Qradar Security Information And Event Manager

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.

Affected products

• IBM Qradar Security Information And Event Manager: from 7.3.0, before 7.3.3 (fixed in 7.3.3); from 7.4.0, before 7.4.3 (fixed in 7.4.3); version 7.3.3 only; version 7.4.3 only; version 7.5.0 only

Published 2022-04-27. Last modified 2026-06-17.