Lucene search

K
ibmIBMD1B28F7A5B0102DBB61DF42110316661C972C49A6A23117FBF9A79A04658DA84
HistoryMar 12, 2024 - 5:30 p.m.

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to low integrity impacts due to Java SE (CVE-2023-22006)

2024-03-1217:30:34
www.ibm.com
6
ibm sterling partner engagement manager
low integrity impacts
java se
cve-2023-22006
upgrades available

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

Summary

IBM Sterling Partner Engagement Manager uses Java SE. This bulletin identifies the steps to take to address the vulnerability.

Vulnerability Details

CVEID:CVE-2023-22006
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Networking component could allow a remote attacker to cause low integrity impacts.
CVSS Base score: 3.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261043 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Sterling Partner Engagement Manager 6.2.2
IBM Sterling Partner Engagement Manager 6.1.2
IBM Sterling Partner Engagement Manager 6.2.0

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading …

Product Version Remediation
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.2.2 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.1.2.9 Link
IBM Sterling Partner Engagement Manager Essentials Edition 6.2.0.7 Link
IBM Sterling Partner Engagement Manager Standard Edition 6.2.0.7 Link

Workarounds and Mitigations

None

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%