CVE-2022-34354Medium 4.0IBM Sterling Partner Engagement Manager information disclosure0.2%
CVE-2022-34348High 7.1IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensit1.7%
CVE-2021-29781Critical 9.8IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could2.9%