CVE-2020-4509: XEE
IBM QRadar is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Other sources
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364.
Affected Software
Event History
Frequently Asked Questions
What is IBM QRadar SIEM 7.3 and 7.4?
IBM QRadar SIEM 7.3 and 7.4 is a security information and event management system developed by IBM.
What is XML External Entity Injection (XXE) attack?
XML External Entity Injection (XXE) is an attack where an attacker can exploit vulnerabilities in the XML input handling of an application to disclose internal files, execute remote code, or perform denial of service attacks.
What is the impact of CVE-2020-4509?
The impact of CVE-2020-4509 is that a remote attacker can use an XXE attack to expose sensitive information or consume memory resources in IBM QRadar SIEM 7.3 and 7.4.
How can a remote attacker exploit CVE-2020-4509?
A remote attacker can exploit CVE-2020-4509 by sending specially crafted XML data to the vulnerable IBM QRadar SIEM system, triggering the XXE vulnerability.
Is there a fix available for CVE-2020-4509?
Yes, IBM has provided a fix for CVE-2020-4509. It is recommended to update to the latest version of IBM QRadar SIEM 7.3 or 7.4 and apply the necessary patches.