Security Bulletin: IBM Partner Engagement Manager is vulnerable to cross-site scripting (CVE-2023-23480)

Summary IBM Sterling Partner Engagement Manager has addressed a reflected cross-site scripting vulnerability. Vulnerability Details CVEID:CVE-2023-23480 DESCRIPTION: IBM Sterling Partner Engagement Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: Spring Security OAuth Affects IBM Partner Engagement Manager (CVE-2022-22969)

Summary IBM Sterling Partner Engagement Manager uses Spring Security OAuth that is vulnerable to a denial of service, caused by initiation of the Authorization Request in an OAuth 2.0 Client application. By sending multiple specially-crafted requests, a remote attacker could exploit this...

Security Bulletin: De-serialization Vulnerability Affects IBM Partner Engagement Manager (CVE-2021-29781)

Summary IBM Sterling Partner Engagement Manager could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. Vulnerability...

PT-2021-18475

Name of the Vulnerable Software and Affected Versions IBM Partner Engagement Manager version 2.0 Description The issue is caused by an unsafe deserialization flaw, allowing a remote attacker to execute arbitrary code on the system by sending specially-crafted data. Recommendations For IBM Partner...

CVE-2021-29781: Deserialization of Untrusted Data

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...