| CVE-2025-13702 |
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 is vulnerable to…
|
6.1
Medium
|
Mar 13, 2026 |
| CVE-2025-13718 |
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote…
|
3.7
Low
|
Mar 13, 2026 |
| CVE-2025-13723 |
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to…
|
5.3
Medium
|
Mar 13, 2026 |
| CVE-2025-13726 |
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote…
|
5.3
Medium
|
Mar 13, 2026 |
| CVE-2025-14811 |
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to…
|
3.1
Low
|
Mar 13, 2026 |
| CVE-2025-33093 |
IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored…
|
7.5
High
|
May 7, 2025 |
| CVE-2022-35640 |
IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a…
|
4.0
Medium
|
Jul 16, 2024 |
| CVE-2023-28517 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 13, 2024 |
| CVE-2023-38722 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Oct 23, 2023 |
| CVE-2023-43045 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized…
|
5.9
Medium
|
Oct 23, 2023 |
| CVE-2023-23480 |
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 8, 2023 |
| CVE-2023-23481 |
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Jun 8, 2023 |
| CVE-2023-23482 |
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking…
|
5.4
Medium
|
Jun 8, 2023 |
| CVE-2022-40615 |
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection
|
6.3
Medium
|
Jan 11, 2023 |
| CVE-2022-34335 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.1 could allow an authenticated user to exhaust server…
|
6.5
Medium
|
Jan 11, 2023 |
| CVE-2022-34334 |
IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an…
|
6.3
Medium
|
Oct 10, 2022 |
| CVE-2022-35639 |
IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could…
|
7.5
High
|
Jul 26, 2022 |
| CVE-2022-22417 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jul 19, 2022 |
| CVE-2022-22416 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery…
|
5.4
Medium
|
Jul 19, 2022 |
| CVE-2022-22360 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to…
|
7.5
High
|
Jul 19, 2022 |
| CVE-2022-22359 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery…
|
4.3
Medium
|
Jul 19, 2022 |
| CVE-2022-22358 |
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity…
|
7.1
High
|
Jul 19, 2022 |
| CVE-2022-22332 |
IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing…
|
5.6
Medium
|
Apr 1, 2022 |