NetSight
medium5.3

CVE-2019-4262

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF).

Impact

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
from 7.2.0 before 7.2.8
from 7.3.0 before 7.3.2
Versions 7.2.8, 7.3.2

Weakness classification

References