IBM Sterling Partner Engagement Manager Cross-Site Scripting Vulnerability (CNVD-2024-13531)

2024-03-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

sterling

partner

engagement

manager

cross-site scripting

vulnerability

international business machines

xss

web ui

javascript

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines (IBM). A cross-site scripting vulnerability exists in IBM Sterling Partner Engagement Manager that stems from the presence of a cross-site scripting (XSS) vulnerability. An attacker can exploit this vulnerability to embed arbitrary JavaScript code in the Web UI.

CPENameOperatorVersion
ibm sterling partner engagement managereq6.1.2
ibm sterling partner engagement managereq6.2.0
ibm ibm sterling partner engagement managereq6.2.2