7.6
Élevée
CVE-2020-4509 IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Description
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QRadar SIEM | 7.4 | Pas de correctif indiqué |
| QRadar SIEM | 7.3 | Pas de correctif indiqué |
Autres CVE de QRadar SIEM
Les 100 CVE de QRadar SIEM →
CVE-2025-36051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files…
6.2
Moyenne
CVE-2025-15051
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2026-1276
IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2025-36138
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting
6.4
Moyenne