9 matches found
CVE-2022-22331
IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability IDOR. IBM X-Force ID: 219130...
CVE-2022-22328
IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...
Design/Logic Flaw
IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability IDOR. IBM X-Force ID: 219130...
Code injection
IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...
CVE-2022-22331
The CVE-2022-22331 issue affects IBM Sterling Partner Engagement Manager Standard Edition 6.2.0, due to an insecure direct object vulnerability (IDOR). A remote authenticated attacker could disclose sensitive information or modify user details (impact per sources). Remediation exists: IBM lists F...
CVE-2022-22331
IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability IDOR. IBM X-Force ID: 219130...
CVE-2022-22328
IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...
CVE-2022-22328
IBM Sterling Partner Engagement Manager Standard Edition 6.2.0 contains a privilege-escalation vulnerability that could allow a malicious user to perform unintended operations on other users’ data. The issue is documented in multiple feeds (NVD entry CVE-2022-22328, with CVSSv3.1 base score 6.2 a...
CVE-2022-22328
IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...