3.7
Low
CVE-2021-20429 IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive…
Description
IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QRadar SIEM | 4.1.1 | No fix stated |
| QRadar SIEM | 1.0.0 | No fix stated |
Other CVEs of QRadar SIEM
The 100 CVEs of QRadar SIEM →
CVE-2025-36051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files…
6.2
Medium
CVE-2025-15051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Medium
CVE-2026-1276
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Medium
CVE-2025-36138
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting
6.4
Medium