HIGH

CVE-2020-4280

CVSS v3

8.8

HIGH

EPSS Score

45.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.

Technical details

Published
10/8/2020

Frequently asked questions

What is CVE-2020-4280?

IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.

Is CVE-2020-4280 actively exploited?

Active exploitation of CVE-2020-4280 has not been confirmed. The EPSS score is 45.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-4280?

CVE-2020-4280 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2020-4280 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.