CVE-2021-38939: IBM Qradar Security Information And Event Manager

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037.

Affected products

• IBM Qradar Security Information And Event Manager: from 7.3.0, before 7.3.3 (fixed in 7.3.3); from 7.4.0, before 7.4.3 (fixed in 7.4.3); version 7.3.3 only; version 7.4.3 only; version 7.5.0 only

Published 2022-04-27. Last modified 2026-06-17.