CVE-2022-34348

🗓️ 23 Sep 2022 17:35:15Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 52 Views

IBM Sterling Partner Engagement Manager 6.1 XML External Entity Injection vulnerabilit

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: XML External Entity Injection (XXE) attack Affects IBM Partner Engagement Manager (CVE-2022-34348)	26 Mar 202502:19	–	ibm
BDU FSTEC	The vulnerability of the IBM Sterling Partner Engagement Manager software lies in the improper limitation of XML links to external objects, which allows attackers to disclose protected information.	23 Jan 202300:00	–	bdu_fstec
Circl	CVE-2022-34348	23 Sep 202222:20	–	circl
CNNVD	IBM Sterling Partner Engagement Manager和IBM X-Force 代码问题漏洞	23 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-34348	23 Sep 202217:35	–	cvelist
EUVD	EUVD-2022-37303	3 Oct 202520:07	–	euvd
NVD	CVE-2022-34348	23 Sep 202218:15	–	nvd
OSV	CVE-2022-34348	23 Sep 202218:15	–	osv
Prion	Xxe	23 Sep 202218:15	–	prion
Positive Technologies	PT-2022-6156 · Ibm · Ibm Sterling Partner Engagement Manager	22 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

ibm sterling_partner_engagement_managerRange2.0–6.1.2.6essentials

ibm sterling_partner_engagement_managerRange2.0–6.1.2.6standard

ibm sterling_partner_engagement_managerRange6.2.0.0–6.2.0.4essentials

ibm sterling_partner_engagement_managerRange6.2.0.0–6.2.0.4standard

ibm sterling_partner_engagement_managerMatch6.2.1.0essentials

ibm sterling_partner_engagement_managerMatch6.2.1.0standard

[
  {
    "product": "Partner Engagement Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.1"
      }
    ]
  }
]