Partner Engagement Manager

partner_engagement_manager

Vendor: Ibm • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34354 1Ibm 1Partner Engagement Manager Jun 17, 2026 Nov 16, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
CVE-2022-22417 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223127.Show less
CVE-2022-22416 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potenti...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 223126.Show less
CVE-2022-22360 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulne...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 220782.Show less
CVE-2022-22359 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220652.Show less
CVE-2022-22358 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expos...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651.Show less
CVE-2022-22332 1Ibm 1Partner Engagement Manager Jun 17, 2026 Apr 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.
CVE-2022-22331 1Ibm 1Partner Engagement Manager Jun 17, 2026 Apr 1, 2022 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 21...Show more IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.Show less
CVE-2022-22328 1Ibm 1Partner Engagement Manager Jun 17, 2026 Apr 1, 2022 N/A· v4 6.2 MEDIUM· v3 2.1 LOW· v2 IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871.
CVE-2021-29781 1Ibm 1Partner Engagement Manager Jun 17, 2026 Jul 30, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulner...Show more IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091.Show less