NetSight
IP …
high7.1

CVE-2018-1730

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

Impact

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147709.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
from 7.2.0 through 7.2.8
from 7.3.0 through 7.3.1
Versions 7.2.8, 7.3.1

Weakness classification

CWE-611

References