CVE-2022-35639

Published: Jul 26, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cause the server to become unresponsive. IBM X-Force ID: 230932.

Affected (3)

Products: Ibm: Sterling Partner Engagement Manager, Sterling Partner Engagement Manager On Cloud

Ibm

2 products

Sterling Partner Engagement Manager

Sterling Partner Engagement Manager On Cloud

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Sterling Partner Engagement Manager	From 6.1 to 6.1.2.5
Ibm Sterling Partner Engagement Manager	From 6.2 to 6.2.0.3
Ibm Sterling Partner Engagement Manager On Cloud	Version 22.2

Running on/with	Platform Versions
Linux Linux Kernel	All versions

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/230932

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6606969

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/230932

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6606969

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.