CVE-2020-4272: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files.

Security readout for executives and security teams

CVE-2020-4272 affects IBM QRadar 7.3.0 through 7.3.3 Patch 2. A logged-in remote attacker, with user interaction, may be able to include a malicious remote file and potentially execute code on the QRadar server. Because QRadar is a security monitoring platform, compromise could affect incident detection and sensitive security data. Exposure is most likely where IBM QRadar 7.3.0 through 7.3.3 Patch 2 remains deployed, especially if administrative or forensic web interfaces are reachable by broad internal networks. Treat this as a moderate-priority remediation for any still-running QRadar 7.3.x environment. The business concern is not broad internet wormability from the provided evidence, but loss of trust in a core security monitoring platform. Mitigation focus: Check IBM advisory 6189645 for the official remediation path.; Upgrade or patch affected QRadar versions according to IBM guidance.; Restrict QRadar web access to trusted administrators and management networks..

Prepared

May 25, 2026, 13:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.