Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-22416 EUVD-2022-27562GHSA-p3qc-mh98-4vq5

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow…

Published Jul 19, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 223126.

Affected products

VendorProductAffectedFixed
IBM Sterling Partner Engagement Manager on Cloud 22.2 —
IBM Sterling Partner Engagement Manager 6.1.2, 6.2 —

References