CVE-2020-4787

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF)

Medium · published January 27, 2021

CVSS v3.0
4.2
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/I:L/PR:H/AC:L/UI:N/C:L/S:U/AV:L/A:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Published
2021-01-27T16:35Z
EPSS history
Timeline
  • 27 JAN 16:35Z
    IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF)
    cvelistv5