CVE-2022-22332

—

CVSS 3.1

7.5 high

EPSS

<1%p53

Published

Apr 1, 2022 (Apr 1, 2022)

Modified

Jun 17, 2026

Description

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

Vendors: ibm
Products: partner engagement manager
Weakness: CWE-672
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.