IBM Sterling Partner Engagement Manager

• CVE-2025-13702 Medium 6.1 IBM Sterling Partner Engagement Manager Cross-Site Scripting 0.2%
• CVE-2025-13718 Low 3.7 IBM Sterling Partner Engagement Manager Information Disclosure 0.2%
• CVE-2025-13723 Medium 5.3 IBM Sterling Partner Engagement Manager Information Disclosure 0.2%
• CVE-2025-13726 Medium 5.3 IBM Sterling Partner Engagement Manager Information Disclosure 0.3%
• CVE-2025-14811 Low 3.1 IBM Sterling Partner Engagement Manager Information Disclosure 0.2%
• CVE-2025-33093 High 7.5 IBM Sterling Partner Engagement Manager information disclosure 0.4%
• CVE-2022-35640 Medium 4.0 IBM Sterling Partner Engagement Manager information disclosure 0.2%
• CVE-2023-28517 Medium 5.4 IBM Sterling Partner Engagement Manager cross-site scripting 0.3%
• CVE-2023-38722 Medium 6.4 IBM Sterling Partner Engagement Manager cross-site scripting 0.4%
• CVE-2023-43045 Medium 5.9 IBM Sterling Partner Engagement Manager security bypass 1.1%
• CVE-2023-23480 Medium 5.4 IBM Sterling Partner Engagement Manager cross-site scripting 0.4%
• CVE-2023-23481 Medium 6.4 IBM Sterling Partner Engagement Manager cross-site scripting 0.4%
• CVE-2023-23482 Medium 5.4 IBM Sterling Partner Engagement Manager clickjacking 0.6%
• CVE-2022-40615 Medium 6.3 IBM Sterling Partner Engagement Manager SQL injection 0.7%
• CVE-2022-34335 Medium 6.5 IBM Sterling Partner Engagement Manager denial of service 0.7%
• CVE-2022-34334 Medium 6.3 IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704. 0.4%
• CVE-2022-35639 High 7.5 IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cause the server to become unresponsive. IBM X-Force ID: 230932. 1.0%
• CVE-2022-22417 Medium 5.4 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alt 0.5%
• CVE-2022-22416 Medium 5.4 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from 0.5%
• CVE-2022-22360 High 7.5 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker coul 1.7%
• CVE-2022-22359 Medium 4.3 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmit 0.3%
• CVE-2022-22358 High 7.1 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vu 1.3%
• CVE-2022-22332 Medium 5.6 IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131. 0.8%