CVE-2022-36771: IBM Qradar User Behavior Analytics

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.

Affected products

• IBM Qradar User Behavior Analytics: before 4.1.9 (fixed in 4.1.9)

Published 2022-09-28. Last modified 2026-06-17.