CVE-2022-40615

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.1 through 6.2.1

Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is due to a SQL injection vulnerability.

Recommendations For versions 6.1 through 6.2.1, update to a version that includes a fix for this issue to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.