CVE-2023-43045
published 2023-10-23CVE-2023-43045: IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.73%
50.1th percentile
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | sterling_partner_engagement_manager | — | — |
| ibm | sterling_partner_engagement_manager | — | — |
| ibm | sterling_partner_engagement_manager | — | — |
| ibm | sterling_partner_engagement_manager | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
vendor_oracle7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vxwp-6hpw-p9g4: IBM Sterling Partner Engagement Manager 6
ghsa_unreviewed·2023-10-23
CVE-2023-43045 [HIGH] CWE-288 GHSA-vxwp-6hpw-p9g4: IBM Sterling Partner Engagement Manager 6
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896.
Oracle
Oracle Oracle Analytics Risk Matrix: Analytics Server (Apache Avro) — CVE-2021-43045
vendor_oracle·2023-10-15·CVSS 7.5
CVE-2021-43045 [HIGH] Oracle Oracle Analytics Risk Matrix: Analytics Server (Apache Avro) — CVE-2021-43045
Oracle Oracle Analytics Risk Matrix: Analytics Server (Apache Avro) vulnerability
CVE: CVE-2021-43045
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2023 (OCT 2023)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-23
Published