7.1
CVSSv3

CVE-2022-22358

Published: 19/07/2022 Updated: 27/07/2022
CVSS v3 Base Score: 7.1 | Impact Score: 4.2 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm partner engagement manager

ibm partner engagement manager on cloud\\/saas 22.2