Vulnerability in Ibm Qradar Analyst Workflow
CVE-2021-20396
IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 196009.
EPSS: 0.002 (16.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Qradar Analyst Workflow — versions 1.0, 1.18.0
- Ibm Security_qradar_analyst_workflow
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
Frequently asked questions
- What is CVE-2021-20396?
- CVE-2021-20396 is a low-severity vulnerability in Ibm Qradar Analyst Workflow, classified under CWE-922. CVSS score: 3.3/10. Published 2021-06-11.
- How severe is CVE-2021-20396?
- Low severity. CVSS v3 base score is 3.3 out of 10.