CVE-2022-22331: IBM Partner Engagement Manager

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.

Affected products

• IBM Partner Engagement Manager: version 6.2.0 only

Published 2022-04-01. Last modified 2026-06-17.