Aller au contenu

Vulnérabilités connues pour IBM Sterling Partner Engagement Manager

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-13702 IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 is vulnerable to… 6.1 Moyenne 13 mars 2026
CVE-2025-13718 IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote… 3.7 Faible 13 mars 2026
CVE-2025-13723 IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to… 5.3 Moyenne 13 mars 2026
CVE-2025-13726 IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote… 5.3 Moyenne 13 mars 2026
CVE-2025-14811 IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to… 3.1 Faible 13 mars 2026
CVE-2025-33093 IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored… 7.5 Élevée 7 mai 2025
CVE-2022-35640 IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a… 4.0 Moyenne 16 juil. 2024
CVE-2023-28517 IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting 5.4 Moyenne 13 mars 2024
CVE-2023-38722 IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to stored cross-site scripting 6.4 Moyenne 23 oct. 2023
CVE-2023-43045 IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized… 5.9 Moyenne 23 oct. 2023
CVE-2023-23480 IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting 5.4 Moyenne 8 juin 2023
CVE-2023-23481 IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting 6.4 Moyenne 8 juin 2023
CVE-2023-23482 IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking… 5.4 Moyenne 8 juin 2023
CVE-2022-40615 IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection 6.3 Moyenne 11 janv. 2023
CVE-2022-34335 IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.1 could allow an authenticated user to exhaust server… 6.5 Moyenne 11 janv. 2023
CVE-2022-34334 IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an… 6.3 Moyenne 10 oct. 2022
CVE-2022-35639 IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could… 7.5 Élevée 26 juil. 2022
CVE-2022-22417 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting 5.4 Moyenne 19 juil. 2022
CVE-2022-22416 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery… 5.4 Moyenne 19 juil. 2022
CVE-2022-22360 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to… 7.5 Élevée 19 juil. 2022
CVE-2022-22359 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery… 4.3 Moyenne 19 juil. 2022
CVE-2022-22358 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity… 7.1 Élevée 19 juil. 2022
CVE-2022-22332 IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing… 5.6 Moyenne 1 avr. 2022

Autres produits IBM