CVE-2020-4510

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

High · published July 14, 2020

CVSS v3.0
7.6
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182365.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/S:C/C:H/AC:L/A:L/PR:H/AV:N/I:N/UI:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01989 · 80.5th percentile
Published
2020-07-14T13:10Z
EPSS history
Timeline
  • 14 JUL 13:10Z
    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
    cvelistv5