CVE-2017-1458

High

Published: 05/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM QRadar Network Security 5.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Risk Assessment

This vulnerability could lead to the exposure of confidential data and impact system performance, which may have serious consequences for the organization.

Recommendation

It is recommended to update to the latest version of IBM QRadar Network Security to mitigate the risks associated with this vulnerability.

Other vulnerabilities in IBM QRadar Network Security 5.4

CVE-2017-1491High
IBM QRadar Network Security 5.4 supports interaction between multiple actors who can negotiate which algorithm should be used as a protection mechanism, but it does not select the strongest algorithm available to both parties.

Original NVD description (English source)

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS