CVE-2023-28517

Summary

CVE-2023-28517 is a newly disclosed cross-site scripting (XSS) vulnerability affecting IBM Sterling Partner Engagement Manager versions 6.1.2, 6.2.0, and 6.2.2. This issue allows users to inject malicious JavaScript code into the Web UI, resulting in unintended functionality alterations. Potentially, this vulnerability could lead to the disclosure of sensitive credentials within trusted sessions. IBM X-Force has assigned ID 250421 to this security weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.