CVE-2019-4262

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF)

Medium · published September 26, 2019

CVSS v3.0
5.3
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/PR:N/I:L/AC:L/S:U/C:N/A:N/UI:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Published
2019-09-26T15:05Z
EPSS history
Timeline
  • 26 SEP 15:05Z
    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF)
    cvelistv5