Lucene search

K
ibmIBM156B9517BD219F230852F1E6237E869D4B6CA751863AA60066A9801AC3121E10
HistoryMar 12, 2024 - 5:47 p.m.

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to low confidentiality impacts due to Java SE (CVE-2023-22045)

2024-03-1217:47:43
www.ibm.com
8
ibm sterling partner engagement manager
vulnerability
low confidentiality
java se
cve-2023-22045
security bulletin
remediation
6.2.2
6.1.2
6.2.0

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

Summary

IBM Sterling Partner Engagement Manager uses Java SE.

Vulnerability Details

CVEID:CVE-2023-22045
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low confidentiality impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261047 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Sterling Partner Engagement Manager 6.2.2
IBM Sterling Partner Engagement Manager 6.1.2
IBM Sterling Partner Engagement Manager 6.2.0

Remediation/Fixes

Product Version Remediation
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.0.7 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.0.7 Link

Workarounds and Mitigations

None

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%