PT-2021-12280
CVE-2020-5013
·
Published
2021-05-05
·
Updated
2021-05-07
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
IBM QRadar SIEM versions 7.3 through 7.4
Description
The issue allows a remote attacker to expose sensitive information or consume memory resources through a XML External Entity Injection (XXE) attack when processing XML data.
Recommendations
For versions 7.3 and 7.4, update to a version that includes the fix for this issue to prevent XXE attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾