IBM Sterling Partner Engagement Manager Cross-Site Scripting Vulnerability (CNVD-2023-51460)

2023-06-2000:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

sterling

partner engagement

cross-site scripting

vulnerability

javascript

web ui

exploit

0.001 Low

EPSS

Percentile

19.2%

JSON

IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines (IBM). A cross-site scripting vulnerability exists in IBM Sterling Partner Engagement Manager, which can be exploited by an attacker to embed arbitrary JavaScript code in the Web UI.

CPENameOperatorVersion
ibm sterling partner engagement managereq6.1
ibm sterling partner engagement managereq6.2
ibm sterling partner engagement managereq6.2.1