CVE-2020-4786

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-27 · updated 2026-06-17
Weakness: CWE-918

Description

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.

Affected products

IBM QRadar SIEM: 7.3.0, 7.3.1, 7.3.1-p3, 7.3.1-p4, 7.3.1-p5, 7.3.1-p6 (+20)

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/189221
https://www.ibm.com/support/pages/node/6408866
https://exchange.xforce.ibmcloud.com/vulnerabilities/189221
https://www.ibm.com/support/pages/node/6408866

Get alerted when CVE-2020-4786 or the next vulnerability affects your stack