QRadar Community Edition 7.3.1.6 Arbitrary Object Instantiation

Posted on 22 April 2020

QRadar Community Edition version 7.3.1.6 is vulnerable to instantiation of arbitrary objects based on user-supplied input. An authenticated attacker can abuse this to perform various types of attacks including server-side request forgery and (potentially) arbitrary execution of code.