Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMC019C7254BEEB9E2084C639A020C28518B5CBA782CFD4483E8894BC5FC8E14AE
HistoryMar 12, 2024 - 5:49 p.m.

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to low confidentiality impacts due to Java SE (CVE-2023-22044)

2024-03-1217:49:35
www.ibm.com
7
ibm sterling partner engagement manager
java se
vulnerability
low confidentiality impacts
upgrade
cve-2023-22044

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.2%

JSON

Summary

IBM Sterling Partner Engagement Manager uses Java SE. This bulletin identifies the steps to take to address the vulnerability.

Vulnerability Details

CVEID:CVE-2023-22044
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low confidentiality impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261046 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Sterling Partner Engagement Manager 6.2.2
IBM Sterling Partner Engagement Manager 6.1.2
IBM Sterling Partner Engagement Manager 6.2.0

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading …

Product Version Remediation
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.0.7 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.0.7 Link

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmmulti-enterprise_integration_gatewayMatch6.2.2.2
OR
ibmmulti-enterprise_integration_gatewayMatch6.1.2.9
OR
ibmmulti-enterprise_integration_gatewayMatch6.2.0.7

Related

nvd 1
openvas 14
ubuntucve 1
redhatcve 1
debiancve 1
cvelist 1
prion 1
veracode 1
osv 6
alpinelinux 1
f5 1
cve 1
debian 1
nessus 22
ubuntu 3
redhat 9
almalinux 2
oraclelinux 2
amazon 1
kaspersky 1
ibm 2
mageia 1
oracle 1
nvd
nvd
CVE-2023-22044
2023-07-18 21:15:14
openvas
openvas
Oracle OpenJDK Vulnerability (CVE-2023-22044)
2023-07-19 00:00:00
Oracle Java SE Security Update (jul2023) 04 - Linux
2023-07-19 00:00:00
Oracle Java SE Security Update (jul2023) 04 - Windows
2023-07-19 00:00:00
ubuntucve
ubuntucve
CVE-2023-22044
2023-07-18 00:00:00
redhatcve
redhatcve
CVE-2023-22044
2023-07-19 13:43:45
debiancve
debiancve
CVE-2023-22044
2023-07-18 21:15:14
cvelist
cvelist
CVE-2023-22044
2023-07-18 20:18:28
prion
prion
Buffer overflow
2023-07-18 21:15:00
veracode
veracode
Information Disclosure
2023-11-30 20:28:58
osv
osv
CVE-2023-22044
2023-07-18 21:15:14
openjdk-17 - security update
2023-07-25 00:00:00
Moderate: java-17-openjdk security and bug fix update
2023-07-20 00:00:00
alpinelinux
alpinelinux
CVE-2023-22044
2023-07-18 21:15:14
f5
f5
K000135635 : Java vulnerability CVE-2023-22044
2023-07-27 00:00:00
cve
cve
CVE-2023-22044
2023-07-18 21:15:14
debian
debian
[SECURITY] [DSA 5458-1] openjdk-17 security update
2023-07-25 18:52:56
nessus
nessus
Debian DSA-5458-1 : openjdk-17 - security update
2023-07-26 00:00:00
RHEL 8 : java-17-openjdk (RHSA-2023:4159)
2023-07-20 00:00:00
Ubuntu 23.04 : OpenJDK 20 vulnerabilities (USN-6272-1)
2023-08-03 00:00:00
ubuntu
ubuntu
OpenJDK regression
2023-08-30 00:00:00
OpenJDK vulnerabilities
2023-08-01 00:00:00
OpenJDK 20 vulnerabilities
2023-08-03 00:00:00
redhat
redhat
(RHSA-2023:4171) Moderate: java-17-openjdk security update
2023-07-19 16:35:38
(RHSA-2023:4170) Moderate: java-17-openjdk security update
2023-07-19 16:35:36
(RHSA-2023:4159) Moderate: java-17-openjdk security and bug fix update
2023-07-20 11:24:10
almalinux
almalinux
Moderate: java-17-openjdk security and bug fix update
2023-07-20 00:00:00
Moderate: java-17-openjdk security and bug fix update
2023-07-20 00:00:00
oraclelinux
oraclelinux
java-17-openjdk security and bug fix update
2023-07-26 00:00:00
java-17-openjdk security and bug fix update
2023-07-28 00:00:00
amazon
amazon
Medium: java-17-amazon-corretto
2023-07-17 17:39:00
kaspersky
kaspersky
KLA51006 Multiple vulnerabilities in Oracle Java SE and GraalVM
2023-07-18 00:00:00
ibm
ibm
Security Bulletin: Vulnerability with kernel , OpenJDK jna-platform affect IBM Cloud Object Storage Systems (Sept2023)
2023-09-25 21:05:26
Security Bulletin: Vulnerabilities in Golang, openSSH and openJDK might affect IBM Spectrum Copy Data Management
2023-09-15 13:26:39
mageia
mageia
Updated java packages fix security vulnerabilities
2023-09-30 22:15:40
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.2%

JSON
Related for C019C7254BEEB9E2084C639A020C28518B5CBA782CFD4483E8894BC5FC8E14AE
nvd1openvas14ubuntucve1redhatcve1debiancve1cvelist1prion1veracode1osv6alpinelinux1f51cve1debian1nessus22ubuntu3redhat9almalinux2oraclelinux2amazon1kaspersky1ibm2mageia1oracle1