CVE-2017-1458

CVE-2017-1458 describes an XML External Entity (XXE) injection vulnerability in IBM QRadar Network Security 5.4. This flaw allows a remote attacker to exploit the system by processing malicious XML data, potentially leading to the exposure of sensitive information or a denial-of-service condition due to memory exhaustion. Rated with a CVSS score of 8.1 (HIGH), the attack requires low privileges and no user interaction, making it a significant risk. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.