Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:partner_engagement_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPartner Engagement Manager (cf057456-310d-5613-b4f8-128de5cf0537)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-34354 vulnerable 2026-06-08 05:44:52.672352 IBM Sterling Partner Engagement Manager information disclosure
MEDIUM (4)
IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
Published: 2022-11-16T16:25:44.345Z
Updated: 2025-04-25T19:35:04.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34348 vulnerable 2026-06-08 05:44:52.653788 Details available
HIGH (7.1)
IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.
Published: 2022-09-23T17:35:15.321Z
Updated: 2025-05-22T19:50:29.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29781 vulnerable 2026-06-08 05:31:27.013596 Details available
CRITICAL (9.8)
IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091.
Published: 2021-07-30T11:15:14.972Z
Updated: 2024-09-17T00:17:31.027Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.