CVSS 7.1 · High EPSS 0,48%
Kerentanan Improper Restriction of XML External Entity Reference pada ibm qradar security information and event manager. Skor CVSS 3.1 7.1 (High) menurut us.ibm.com.
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.5.0 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_1 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_10 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_11 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_12 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_2 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_3 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_4 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_5 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_6 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_7 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_8 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_9 |