CVE-2020-4509

IBM QRadar SIEM (7.3 and 7.4) is affected by CVE-2020-4509, a XML External Entity (XXE) injection in XML processing that could expose sensitive data or exhaust memory. The issue is tied to SDEE protocol handling, with base CVSS v3.1/3.0 scores around 7.6 (HIGH) and 5.5 (MEDIUM) in different vecto...

Security Bulletin: IBM QRadar is vulnerable to an XML External Entity Injection (XXE) attack (CVE-2020-4509)

Summary IBM QRadar is vulnerable to an XML External Entity Injection XXE attack when processing XML data Vulnerability Details CVEID: CVE-2020-4509 DESCRIPTION: IBM QRadar is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...