CVE-2020-4280

IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied…

Medium · published October 8, 2020

Patch now

High probability of exploitation

CVSS calls it medium at 6.3. It sits in the 99.5th percentile for exploit probability.

CVSS v3.0
6.3
EPSS
73%
Percentile
99.5
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AC:L/A:L/I:L/C:L/PR:L/UI:N/S:U/AV:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.72975 · 99.5th percentile
Published
2020-10-08T13:20Z
EPSS history
Timeline
  • 08 OCT 13:20Z
    IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied…
    cvelistv5