GCVE - cpe:2.3:a:ibm:qradar_user_behavior_analytics:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_user_behavior_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Qradar User Behavior Analytics (`082a4bc3-a411-5631-b926-33abcd70e3ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36771`	vulnerable	2026-06-08 05:46:07.728140	Details available MEDIUM (4.3) IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791. Published: 2022-09-28T15:55:16.059Z Updated: 2025-05-21T14:25:03.232Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6824197 https://exchange.xforce.ibmcloud.com/vulnerabilities/232791	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-29757`	vulnerable	2026-06-08 05:31:26.961998	Details available MEDIUM (4.3) IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168. Published: 2021-08-02T16:00:13.415Z Updated: 2024-09-16T23:56:48.490Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6477204 https://exchange.xforce.ibmcloud.com/vulnerabilities/202168	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20429`	vulnerable	2026-06-08 05:29:09.232160	Details available LOW (3.7) IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334. Published: 2021-05-14T16:15:37.361Z Updated: 2024-09-16T18:23:33.084Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6453107 https://exchange.xforce.ibmcloud.com/vulnerabilities/196334	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20393`	vulnerable	2026-06-08 05:29:09.201434	Details available MEDIUM (5.3) IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001. Published: 2021-05-14T16:15:36.593Z Updated: 2024-09-16T19:09:30.564Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6453109 https://exchange.xforce.ibmcloud.com/vulnerabilities/196001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20392`	vulnerable	2026-06-08 05:29:09.201064	Details available MEDIUM (6.1) IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Published: 2021-05-14T16:15:35.913Z Updated: 2024-09-16T22:14:55.813Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6453105 https://exchange.xforce.ibmcloud.com/vulnerabilities/196000	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20391`	vulnerable	2026-06-08 05:29:09.200608	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.