Skip to content
OpenAdvisories
High · 7.1 CVE-2022-34348 EUVD-2022-37303GHSA-xg7c-263c-79vp

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo…

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by ibm

Description

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.

Affected products

VendorProductAffectedFixed
IBM Partner Engagement Manager 6.1 —

References