CVE-2020-4294: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF).

Security readout for executives and security teams

An authenticated user could make affected IBM QRadar systems send unauthorized requests on their behalf. For a SIEM, this matters because QRadar often sits in sensitive network positions and may reach internal systems attackers cannot access directly. Exposure is most likely in organizations still running IBM QRadar 7.3.x builds named in the advisory, especially where authenticated non-admin or service accounts can reach QRadar functions tied to the vulnerable component. Treat this as a medium-priority SIEM hardening issue. It is not reported here as actively exploited, but QRadar’s network position can turn SSRF into useful reconnaissance for an authenticated attacker. Mitigation focus: Check IBM advisory 6189663 for the fixed QRadar maintenance level.; Upgrade affected QRadar 7.3.x systems according to IBM guidance.; Restrict QRadar management access to trusted administrative networks..

Prepared

May 25, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.