CVE-2022-34354

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/230424 · VDB Entry
• ibm.com/support/pages/node/6839751 · Patch

partner engagement manager のその他の脆弱性

• CVE-2022-22417中 5.4IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows use…
• CVE-2022-22416中 5.4IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow …
• CVE-2022-22360高 8.8IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injec…
• CVE-2022-22359中 6.5IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an att…
• CVE-2022-22358高 7.1IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when …