Design/Logic Flaw

2023-06-0802:15:00

PRIOn knowledge base

www.prio-n.com

ibm

sterling partner

remote attack

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.0%

JSON

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim’s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 245891.

CPENameOperatorVersion
sterling_partner_engagement_managerge6.1.2
sterling_partner_engagement_managerlt6.1.2.8
sterling_partner_engagement_managerge6.1.2
sterling_partner_engagement_managerlt6.1.2.8
sterling_partner_engagement_managerge6.2.0
sterling_partner_engagement_managerlt6.2.0.6
sterling_partner_engagement_managerge6.2.0
sterling_partner_engagement_managerlt6.2.0.6
sterling_partner_engagement_managerge6.2.1
sterling_partner_engagement_managerlt6.2.1.3

Name	Operator	Version
sterling_partner_engagement_manager	ge	6.1.2
sterling_partner_engagement_manager	lt	6.1.2.8
sterling_partner_engagement_manager	ge	6.1.2
sterling_partner_engagement_manager	lt	6.1.2.8
sterling_partner_engagement_manager	ge	6.2.0
sterling_partner_engagement_manager	lt	6.2.0.6
sterling_partner_engagement_manager	ge	6.2.0
sterling_partner_engagement_manager	lt	6.2.0.6
sterling_partner_engagement_manager	ge	6.2.1
sterling_partner_engagement_manager	lt	6.2.1.3