CVE-2022-22358

🗓️ 19 Jul 2022 16:25:17Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 63 Views

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

Reporter	Title	Published	Views	Family All 10
IBM Security Bulletins	Security Bulletin: IBM Partner Engagement Manager is vulnerable to improper restriction of XXE (CVE-2022-22358)	18 Jul 202211:50	–	ibm
ATTACKERKB	CVE-2022-22358	18 Jul 202200:00	–	attackerkb
Circl	CVE-2022-22358	19 Jul 202220:40	–	circl
CNNVD	IBM Sterling Partner Engagement Manager 代码问题漏洞	19 Jul 202200:00	–	cnnvd
CNVD	IBM Sterling Partner Engagement Manager XML External Entity Injection Vulnerability	21 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-22358	19 Jul 202216:25	–	cvelist
EUVD	EUVD-2022-27504	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22358	19 Jul 202217:15	–	nvd
OSV	CVE-2022-22358	19 Jul 202217:15	–	osv
Prion	Xxe	19 Jul 202217:15	–	prion

NVD

Vulners

Node

ibm partner_engagement_managerRange6.1.2–6.1.2.5essentials

ibm partner_engagement_managerRange6.1.2–6.1.2.5standard

ibm partner_engagement_managerRange6.2.0–6.2.0.3essentials

ibm partner_engagement_managerRange6.2.0–6.2.0.3standard

ibm partner_engagement_manager_on_cloud/saasMatch22.2

[
  {
    "product": "Sterling Partner Engagement Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.2"
      },
      {
        "status": "affected",
        "version": "6.2"
      }
    ]
  },
  {
    "product": "Sterling Partner Engagement Manager on Cloud",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "22.2"
      }
    ]
  }
]