IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM
Authentication Bypass
Qradar User Behavior Analytics
NVD
CVSS 3.1
5.3
EPSS
0.8%
IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
IBM
Information Disclosure
Qradar User Behavior Analytics
NVD
CVSS 3.1
3.3
EPSS
0.2%
Prev
Page 4 of 4