Advisories · Technology

IBM Sterling Partner Engagement Manager.

Every CVE that names IBM Sterling Partner Engagement Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13702 CVE record

CVSS 6.1 Medium

IBM Sterling Partner Engagement Manager Cross-Site Scripting
- IBM Sterling Partner Engagement Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2025-13718 CVE record

CVSS 3.7 Low

IBM Sterling Partner Engagement Manager Information Disclosure
- IBM Sterling Partner Engagement Manager
- Weak cryptography or TLS
Not analysed yet 13 Mar 2026
CVE-2025-13723 CVE record

CVSS 5.3 Medium

IBM Sterling Partner Engagement Manager Information Disclosure
- IBM Sterling Partner Engagement Manager
- CWE-324
Not analysed yet 13 Mar 2026
CVE-2025-13726 CVE record

CVSS 5.3 Medium

IBM Sterling Partner Engagement Manager Information Disclosure
- IBM Sterling Partner Engagement Manager
- Information disclosure
Not analysed yet 13 Mar 2026
CVE-2025-14811 CVE record

CVSS 3.1 Low

IBM Sterling Partner Engagement Manager Information Disclosure
- IBM Sterling Partner Engagement Manager
- CWE-598
Not analysed yet 13 Mar 2026
CVE-2025-33093 CVE record

CVSS 7.5 High

IBM Sterling Partner Engagement Manager information disclosure
- IBM Sterling Partner Engagement Manager
- CWE-260
Not analysed yet 7 May 2025
CVE-2022-35640 CVE record

CVSS 4.0 Medium

IBM Sterling Partner Engagement Manager information disclosure
- IBM Sterling Partner Engagement Manager
- Information disclosure
Not analysed yet 16 Jul 2024
CVE-2023-28517 CVE record

CVSS 5.4 Medium

IBM Sterling Partner Engagement Manager cross-site scripting
- IBM Sterling Partner Engagement Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2023-38722 CVE record

CVSS 6.4 Medium

IBM Sterling Partner Engagement Manager cross-site scripting
- IBM Sterling Partner Engagement Manager
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2023
CVE-2023-43045 CVE record

CVSS 5.9 Medium

IBM Sterling Partner Engagement Manager security bypass
- IBM Sterling Partner Engagement Manager
- Authentication bypass
Not analysed yet 23 Oct 2023
CVE-2023-23480 CVE record

CVSS 5.4 Medium

IBM Sterling Partner Engagement Manager cross-site scripting
- IBM Sterling Partner Engagement Manager
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2023
CVE-2023-23481 CVE record

CVSS 6.4 Medium

IBM Sterling Partner Engagement Manager cross-site scripting
- IBM Sterling Partner Engagement Manager
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2023
CVE-2023-23482 CVE record

CVSS 5.4 Medium

IBM Sterling Partner Engagement Manager clickjacking
- IBM Sterling Partner Engagement Manager
Not analysed yet 8 Jun 2023
CVE-2022-40615 CVE record

CVSS 6.3 Medium

IBM Sterling Partner Engagement Manager SQL injection
- IBM Sterling Partner Engagement Manager
- SQL injection
Not analysed yet 11 Jan 2023
CVE-2022-34335 CVE record

CVSS 6.5 Medium

IBM Sterling Partner Engagement Manager denial of service
- IBM Sterling Partner Engagement Manager
- Denial of service
Not analysed yet 11 Jan 2023
CVE-2022-34334 CVE record

CVSS 6.3 Medium

IBM Sterling Partner Engagement Manager: IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout…
- IBM Sterling Partner Engagement Manager
Not analysed yet 10 Oct 2022
CVE-2022-35639 CVE record

CVSS 7.5 High

IBM Sterling Partner Engagement Manager: IBM Sterling Partner Engagement Manager 6.1, 6.2…
- IBM Sterling Partner Engagement Manager
- IBM Sterling Partner Engagement Manager on Cloud
Not analysed yet 26 Jul 2022
CVE-2022-22417 CVE record

CVSS 5.4 Medium

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting.
- IBM Sterling Partner Engagement Manager on Cloud
- IBM Sterling Partner Engagement Manager
Not analysed yet 19 Jul 2022
CVE-2022-22416 CVE record

CVSS 5.4 Medium

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF).
- IBM Sterling Partner Engagement Manager on Cloud
- IBM Sterling Partner Engagement Manager
Not analysed yet 19 Jul 2022
CVE-2022-22360 CVE record

CVSS 7.5 High

IBM Sterling Partner Engagement Manager: IBM Sterling Partner Engagement Manager 6.1.2, 6.2…
- IBM Sterling Partner Engagement Manager
- IBM Sterling Partner Engagement Manager on Cloud
Not analysed yet 19 Jul 2022
CVE-2022-22359 CVE record

CVSS 4.3 Medium

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmi…
- IBM Sterling Partner Engagement Manager on Cloud
- IBM Sterling Partner Engagement Manager
Not analysed yet 19 Jul 2022
CVE-2022-22358 CVE record

CVSS 7.1 High

IBM Sterling Partner Engagement Manager: IBM Sterling Partner Engagement Manager 6.1.2, 6.2…
- IBM Sterling Partner Engagement Manager
- IBM Sterling Partner Engagement Manager on Cloud
Not analysed yet 19 Jul 2022
CVE-2022-22332 CVE record

CVSS 5.6 Medium

IBM Sterling Partner Engagement Manager: IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate…
- IBM Sterling Partner Engagement Manager
Not analysed yet 1 Apr 2022