CVE-2020-4509: XEE

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/182364
• https://www.ibm.com/support/pages/node/6220154 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6220154

Frequently Asked Questions

• What is IBM QRadar SIEM 7.3 and 7.4?

  IBM QRadar SIEM 7.3 and 7.4 is a security information and event management system developed by IBM.

• What is XML External Entity Injection (XXE) attack?

  XML External Entity Injection (XXE) is an attack where an attacker can exploit vulnerabilities in the XML input handling of an application to disclose internal files, execute remote code, or perform denial of service attacks.

• What is the impact of CVE-2020-4509?

  The impact of CVE-2020-4509 is that a remote attacker can use an XXE attack to expose sensitive information or consume memory resources in IBM QRadar SIEM 7.3 and 7.4.

• How can a remote attacker exploit CVE-2020-4509?

  A remote attacker can exploit CVE-2020-4509 by sending specially crafted XML data to the vulnerable IBM QRadar SIEM system, triggering the XXE vulnerability.

• Is there a fix available for CVE-2020-4509?

  Yes, IBM has provided a fix for CVE-2020-4509. It is recommended to update to the latest version of IBM QRadar SIEM 7.3 or 7.4 and apply the necessary patches.