CVE-2020-5013

moderate-risk

Published 2021-05-05

IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.

Do I need to act?

-

0.58% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

8

CVSS 8.1/10 High

NETWORK / LOW complexity

Affected Products (12)

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Affected Vendors

Ibm

References (4)

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/193245

Vendor Advisory https://www.ibm.com/support/pages/node/6449690

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/193245

Vendor Advisory https://www.ibm.com/support/pages/node/6449690

47

/ 100

moderate-risk

Severity 28/34 · Critical

Exploitability 2/34 · Minimal

Exposure 17/34 · Moderate