CVE-2018-1730: XEE
Published Dec 5, 2018
·Updated
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147709.
Affected Software
4 affected components
IBM QRadar Security Information and Event Manager>=7.2.0<=7.2.8
IBM QRadar Security Information and Event Manager>=7.3.0<=7.3.1
IBM QRadar Security Information and Event Manager=7.2.8-p13
IBM QRadar Security Information and Event Manager=7.3.1-p6
Event History
Dec 5, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1730?
The severity of CVE-2018-1730 is classified as high due to its potential for exposing sensitive information or consuming memory resources.
2
How do I fix CVE-2018-1730?
To fix CVE-2018-1730, upgrade IBM QRadar SIEM to the latest version or apply the available security patches.
3
What systems are affected by CVE-2018-1730?
CVE-2018-1730 affects IBM QRadar SIEM versions 7.2.0 to 7.2.8 and 7.3.0 to 7.3.1.
4
What kind of attack does CVE-2018-1730 allow?
CVE-2018-1730 allows an XML External Entity Injection (XXE) attack.
5
Can CVE-2018-1730 lead to data loss?
Yes, exploiting CVE-2018-1730 could lead to data exposure and possible data loss.