Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager versions 6.3.0.0, 6.2.4.4, and 6.2.3.6. Vulnerability Details CVEID:CVE-2023-47038 DESCRIPTION: A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression i...

CVE-2025-14811

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.

Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...

EUVD-2022-27504

Malicious code in bioql PyPI...

EUVD-2023-42497

Malicious code in bioql PyPI...

EUVD-2022-37303

Malicious code in bioql PyPI...

EUVD-2022-27478

Malicious code in bioql PyPI...

EUVD-2022-38520

Malicious code in bioql PyPI...

EUVD-2022-27474

Malicious code in bioql PyPI...

EUVD-2022-27563

Malicious code in bioql PyPI...

EUVD-2022-27505

Malicious code in bioql PyPI...

EUVD-2023-32187

Malicious code in bioql PyPI...

EUVD-2025-13717

Malicious code in bioql PyPI...

EUVD-2022-27562

Malicious code in bioql PyPI...

EUVD-2023-27580

Malicious code in bioql PyPI...

EUVD-2022-38521

Malicious code in bioql PyPI...

EUVD-2023-47466

Malicious code in bioql PyPI...

EUVD-2022-37290

Malicious code in bioql PyPI...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to FreeType Remote Code Execution Vulnerability (CVE-2025-27363)

Summary IBM Sterling Partner Engagement Manager uses FreeType has part of the package and is affected by CVE-2025-27363 for versions 2.13.0 and below. Vulnerability Details CVEID:CVE-2025-27363 DESCRIPTION: An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of...

CVE-2023-23482

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...