CVE-2020-4888

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 62.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-28 · updated 2026-06-17
Weakness: CWE-502

Description

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.

Affected products

IBM QRadar SIEM: 7.3.0, 7.3.1, 7.3.1-p3, 7.3.1-p4, 7.3.1-p5, 7.3.1-p6 (+20)

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/190912
https://www.ibm.com/support/pages/node/6409306
https://exchange.xforce.ibmcloud.com/vulnerabilities/190912
https://www.ibm.com/support/pages/node/6409306

Get alerted when CVE-2020-4888 or the next vulnerability affects your stack