CVE-2022-35639

3 documents3 sources
Severity
7.5HIGH
EPSS
0.4%
top 39.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Sterling Partner Engagement ManagerIBM Sterling Partner Engagement Manager ON Cloud
Timeline
PublishedJul 26
Latest updateJul 27

Description

IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cause the server to become unresponsive. IBM X-Force ID: 230932.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g4qp-7gv5-8gq3: IBM Sterling Partner Engagement Manager 6↗2022-07-27
▶
CVEList
CVE-2022-35639: IBM Sterling Partner Engagement Manager 6↗2022-07-26
▶
CVE-2022-35639 (HIGH CVSS 7.5) | IBM Sterling Partner Engagement Man | cvebase.io