PT-2021-12280
CVE-2020-5013
·
تاريخ النشر
2021-05-05
·
تاريخ التحديث
2021-05-07
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
IBM QRadar SIEM versions 7.3 through 7.4
Description
The issue allows a remote attacker to expose sensitive information or consume memory resources through a XML External Entity Injection (XXE) attack when processing XML data.
Recommendations
For versions 7.3 and 7.4, update to a version that includes the fix for this issue to prevent XXE attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾