IBM SterlingPartner Engagement Manager

• CVE-2022-22331 Medium 5.4 IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR) 0.7%
• CVE-2022-22328 Medium 6.2 IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871. 0.2%