description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
problem types: Gain Access
affected:
{
product: QRadar SIEM
vendor: IBM
versions:
status: affected, version: 7.2
status: affected, version: 7.3
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 4.6
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/PR:N/I:L/AC:L/S:U/C:N/A:N/UI:N/RC:C/RL:O/E:U
version: 3.0
]