Skip to content
Sign in
7.1 High

CVE-2022-34348 IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when…

Description

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.

Affected products and versions

Product Affected versions Fixed in
Partner Engagement Manager 6.1 No fix stated

Other CVEs of Partner Engagement Manager

The 3 CVEs of Partner Engagement Manager →
CVE-2022-34354 IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be… 4.0 Medium CVE-2021-29781 IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an… 9.8 Critical
Track this CVE