CVE-2020-4271medium

CVE-2020-4271: medium-severity vulnerability in IBM Qradar

Published · Updated

Follow this CVE+ Monitor QRadar

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 1.7%
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.
CVSS:3.0/I:L/A:L/S:U/C:L/UI:N/AV:N/AC:L/PR:L/RC:C/RL:O/E:U
Affected products
IBM · Qradar
Related CVEs — IBM Qradar

In the same product, most dangerous first.

CVE-2020-4269HIGHCVE-2020-4269EPSS 2.0%CVE-2020-4294MEDIUMCVE-2020-4294EPSS 1.2%CVE-2019-4593MEDIUMCVE-2019-4593EPSS 0.8%CVE-2020-4268MEDIUMCVE-2020-4268EPSS 0.6%CVE-2020-4270HIGHCVE-2020-4270EPSS 0.5%CVE-2019-4654LOWCVE-2019-4654EPSS 0.4%