IBM QRadar SIEM XML External Entity Injection Vulnerability

An XML external entity injection (XXE) vulnerability has been identified in IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12. This vulnerability arises when the application processes XML data, allowing remote attackers to exploit it to access sensitive information or deplete memory resources.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information or excessive memory consumption, potentially causing a denial-of-service condition.

Remediation

Users are advised to update to IBM QRadar SIEM version 7.5.0 Update Package 12 Interim Fix 02.