CVE-2022-35639: IBM Sterling Partner Engagement Manager

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cause the server to become unresponsive. IBM X-Force ID: 230932.

Affected products

• IBM Sterling Partner Engagement Manager: from 6.1, before 6.1.2.5 (fixed in 6.1.2.5); from 6.2, before 6.2.0.3 (fixed in 6.2.0.3)
• IBM Sterling Partner Engagement Manager On Cloud: version 22.2 only

Published 2022-07-26. Last modified 2026-06-17.