CVE-2020-4509

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

High · published June 4, 2020

CVSS v3.0
7.6
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/PR:H/UI:N/A:L/S:C/AC:L/I:N/AV:N/C:H/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.01528 · 74.5th percentile
Published
2020-06-04T13:35Z
EPSS history
Timeline
  • 04 JUN 13:35Z
    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
    cvelistv5