Partner Engagement Manager Security Vulnerabilities and Issues — Partner Engagement Manager CVE List

Lucene search

IbmPartner Engagement Manager

4 matches found

CVE•added 2022/04/01 5:15 p.m.•76 views

CVE-2022-22331

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.

7.1CVSS6.3AI score0.00109EPSS

CVE•added 2022/04/01 5:15 p.m.•72 views

CVE-2022-22332

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

7.5CVSS7.2AI score0.00238EPSS

CVE•added 2022/07/19 5:15 p.m.•55 views

CVE-2022-22358

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651.

7.1CVSS6.8AI score0.00418EPSS

CVE•added 2022/09/23 6:15 p.m.•37 views

CVE-2022-34348

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.

7.1CVSS6.8AI score0.00078EPSS