CVE-2021-20392

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2021-20392

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Code injection

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...

Design/Logic Flaw

IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642...

Information disclosure

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001...

Cross site scripting

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334...

Cross site scripting

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2021-20429

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334...

CVE-2021-20429

CVE-2021-20429 affects IBM QRadar User Behavior Analytics add-on for QRadar SIEM (versions 1.0.0–4.1.0). The root cause is an overly permissive cross-domain policy (CORS) that can disclose sensitive information. IBM’s bulletin cites CVSSv3.0 base score 3.7 and recommends upgrading to version 4.1....

CVE-2021-20393

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001...

CVE-2021-20393

CVE-2021-20393 affects IBM QRadar User Behavior Analytics (UBA) add-on for QRadar SIEM, versions 1.0.0–4.1.0 . The underlying issue is an information disclosure vulnerability where a detailed technical error message returned in the browser can reveal sensitive data, potentially enabling further a...

CVE-2021-20391

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...

CVE-2021-20392

CVE-2021-20392 affects IBM QRadar User Behavior Analytics (the add-on to QRadar SIEM) versions 1.0.0–4.0.1. The vulnerability is a cross-site scripting flaw in the Web UI caused by insufficient validation of client data, enabling attackers to inject arbitrary JavaScript into the UI and potentiall...

CVE-2021-20391

CVE-2021-20391 affects IBM QRadar User Behavior Analytics (QRadar UBA) add-on for QRadar SIEM, with versions 1.0.0–4.1.0 vulnerable to an information-disclosure issue where web pages can be stored locally and read by other users on the same system. The IBM Security Bulletin (E2FDAB2D4F6B1859F199A...

CVE-2021-20392

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4985

IBM Planning Analytics Local 2.0 is affected by an information-disclosure vulnerability in the Planning Analytics Spreadsheet Services component, caused by accepting body parameters in a query. The issue could allow an attacker to obtain sensitive information. IBM states the vulnerability is addr...

CVE-2020-4985

IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642...

IBM Planning Analytics 授权问题漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. IBM Planning Analytics suffers from an authorization issue vulnerability that stems from the fact...

IBM Planning Analtyics 安全漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analtyics that stems from an IBM Planning analytic...

Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to information exposure (CVE-2021-20393)

Summary User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to information exposure. Vulnerability Details CVEID: CVE-2021-20393 DESCRIPTION: IBM QRadar User Behavior Analytics could allow a remote attacker to obtain sensitive information when a detailed technical error...