Aller au contenu
Se connecter
7.1 Élevée

CVE-2022-34348 IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when…

Description

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.

Produits et versions touchés

Produit Versions touchées Corrigé en
Partner Engagement Manager 6.1 Pas de correctif indiqué

Autres CVE de Partner Engagement Manager

Les 3 CVE de Partner Engagement Manager →
CVE-2022-34354 IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be… 4.0 Moyenne CVE-2021-29781 IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an… 9.8 Critique
Suivre cette CVE