CVE-2020-4510

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182365.

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/182365	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6246133	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p1:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:-:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p2:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:p1:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:p2:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p3:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:-:*:*:*:*:*:*

---

Published : 2020-07-14 01:15

Updated : 2020-07-14 07:58

---

NVD link : CVE-2020-4510

Mitre link : CVE-2020-4510

No products.

CWE-611

Improper Restriction of XML External Entity Reference