IBM Qradar User Behavior Analytics vulnerabilities
6 CVEs affecting IBM Qradar User Behavior Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36771, published 2022-09-28.
More from IBM.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2021-20393, published 2021-05-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…
- CVE-2021-20429, published 2021-05-14. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.
- CVE-2021-20392, published 2021-05-14. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
- CVE-2022-36771, published 2022-09-28. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.
- CVE-2021-29757, published 2021-08-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the…
- CVE-2021-20391, published 2021-05-14. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.