CVE-2020-4272: falha de média gravidade em IBM QRadar
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 3.0%
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID: 175898.
CVSS:3.0/C:L/UI:R/AV:N/AC:L/PR:L/I:L/A:L/S:U/RC:C/E:U/RL:O
Produtos afetados
IBM · QRadarCVEs relacionadas — IBM QRadar
No mesmo produto, das mais perigosas para as menos.
CVE-2019-4581MEDIUMCVE-2019-4581EPSS 0.9%CVE-2020-4274MEDIUMCVE-2020-4274EPSS 0.9%CVE-2019-4594MEDIUMCVE-2019-4594EPSS 0.8%CVE-2019-4509MEDIUMCVE-2019-4509EPSS 0.7%CVE-2026-10025HIGHIBM QRadar SIEM has an XML External Entity (XXE) injection vulnerabilityEPSS 0.6%CVE-2019-4470MEDIUMCVE-2019-4470EPSS 0.6%