ibm partner engagement manager

Name: ibm partner engagement manager
Brand: ibm

productUS

cpe:2.3:a:ibm:partner_engagement_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high4medium1low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-29781US	critical9.8	2.86% (87th)	—	no fix	2021-07-30	= 2.0
CVE-2022-22360US	high8.8	1.69% (77th)	—	6.2.0.3	2022-07-19	2 versions
CVE-2022-22358US	high7.1	1.25% (69th)	—	6.1.2.5	2022-07-19	2 versions
CVE-2022-22332US	high7.5	0.76% (55th)	—	no fix	2022-04-01	= 6.2.0
CVE-2022-22331US	high7.1	0.73% (54th)	—	no fix	2022-04-01	= 6.2.0
CVE-2022-22417US	medium5.4	0.50% (42nd)	—	6.1.2.5	2022-07-19	2 versions
CVE-2022-22416US	medium5.4	0.45% (39th)	—	6.2.0.3	2022-07-19	2 versions
CVE-2022-22359US	medium6.5	0.30% (22nd)	—	6.2.0.3	2022-07-19	2 versions
CVE-2022-22328US	medium6.2	0.24% (15th)	—	no fix	2022-04-01	= 6.2.0
CVE-2022-34354US	low3.3	0.20% (10th)	—	no fix	2022-11-16	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs
CWE-672Operation on a Resource after Expiration or Release1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.