PT-2026-25345 · Ibm · Ibm Sterling Partner Engagement Manager
CVE-2025-13702
·
Publicado
2026-03-12
·
Atualizado
2026-03-13
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5
IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2
Description
The software is susceptible to a cross-site scripting issue. An authenticated user can inject arbitrary JavaScript code into the web user interface, potentially altering intended functionality and leading to the disclosure of credentials within a trusted session.
Recommendations
IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 should be updated.
IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2 should be updated.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Sterling Partner Engagement Manager