CVE-2020-4888

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure…

Medium · published January 28, 2021

Patch now

High probability of exploitation

CVSS calls it medium at 6.3. It sits in the 99.2th percentile for exploit probability.

CVSS v3.0
6.3
EPSS
62%
Percentile
99.2
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/I:L/AC:L/C:L/S:U/UI:N/A:L/AV:N/PR:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.62340 · 99.2th percentile
Published
2021-01-28T12:55Z
EPSS history
Timeline
  • 28 JAN 12:55Z
    IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure…
    cvelistv5