Qradar User Behavior Analytics

qradar_user_behavior_analytics

Vendor: Ibm • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36771 1Ibm 1Qradar User Behavior Analytics May 21, 2025 Sep 28, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.
CVE-2021-29757 1Ibm 1Qradar User Behavior Analytics Nov 21, 2024 Aug 2, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Forc...Show more IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168.Show less
CVE-2021-20429 1Ibm 1Qradar User Behavior Analytics Nov 21, 2024 May 14, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.
CVE-2021-20393 1Ibm 1Qradar User Behavior Analytics Nov 21, 2024 May 14, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in f...Show more IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001.Show less
CVE-2021-20392 1Ibm 1Qradar User Behavior Analytics Nov 21, 2024 May 14, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote...Show more IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2021-20391 1Ibm 1Qradar User Behavior Analytics Nov 21, 2024 May 14, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.