Partner Engagement Manager (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2022-11-16. Vendor: Ibm.
CVEs of Partner Engagement Manager
- CVE-2022-34354 - CVSS 4 (medium), 2022-11-16: IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM…
- CVE-2022-34348 - CVSS 7.1 (high), 2022-09-23: IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could…
- CVE-2022-22358 - CVSS 7.1 (high), 2022-07-19: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
- CVE-2022-22416 - CVSS 5.4 (medium), 2022-07-19: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated…
- CVE-2022-22360 - CVSS 8.8 (high), 2022-07-19: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a…
- CVE-2022-22359 - CVSS 6.5 (medium), 2022-07-19: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute…
- CVE-2022-22417 - CVSS 5.4 (medium), 2022-07-19: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
- CVE-2022-22328 - CVSS 6.2 (medium), 2022-04-01: IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data.…
- CVE-2022-22332 - CVSS 7.5 (high), 2022-04-01: IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM…
- CVE-2022-22331 - CVSS 7.1 (high), 2022-04-01: IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an…
- CVE-2021-29781 - CVSS 9.8 (critical), 2021-07-30: IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending…
