CVE-2022-36771

IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.

• CWE-284

• https://exchange.xforce.ibmcloud.com/vulnerabilities/232791VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6824197Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/232791VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6824197Patch, Vendor Advisory

Published

Sep 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36763EDK2 is susceptible to a vulnerability in the Tcg2MeasureGpt…7.8
• CVE-2022-36764EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeI…7.8
• CVE-2022-36765EDK2 is susceptible to a vulnerability in the CreateHob() fu…7.8
• CVE-2022-36768IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…7.8
• CVE-2022-36769 IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged…7.2
• CVE-2022-3677The Advanced Import WordPress plugin before 1.3.8 does not h…6.5
• CVE-2022-36772IBM InfoSphere Information Server 11.7 could allow an authen…6.5
• CVE-2022-36773IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerabl…8.1
• CVE-2022-36774IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is…5.3
• CVE-2022-36775IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.…6.5
• CVE-2022-36776IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is…5.4
• CVE-2022-36777IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0…6.5