[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvUR0udu2Va6INYPzBv3x_OjyBsiMnk3Vqgh4Me4A158":3,"g5a-risk:CVE-2022-22336":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":69,"references":70,"referencesCount":81,"weaknesses":82,"weaknessesCount":91,"isActivelyExploited":92,"cisaInfo":26,"otxData":26,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":137,"notableEvents":138},"CVE-2022-22336","What is CVE-2022-22336?","IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.","IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causin...","2022-02-23T20:15:09.3","2022-03-02T00:44:46.547",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"psirt@us.ibm.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":43,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.01999,[46,46,46,46,46,46,46],"High",[50,55,58,61,64,67],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"ibm","sterling_external_authentication_server","3.4.3.2","cpe:2.3:a:ibm:sterling_external_authentication_server:3.4.3.2:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"6.0.2.0","cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.2.0:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"6.0.3.0","cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.3.0:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":53,"criteria":63,"vulnerable":4},"sterling_secure_proxy","cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.2:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":65,"criteria":66,"vulnerable":4},"6.0.2","cpe:2.3:a:ibm:sterling_secure_proxy:6.0.2:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":59,"criteria":68,"vulnerable":4},"cpe:2.3:a:ibm:sterling_secure_proxy:6.0.3.0:*:*:*:*:*:*:*",6,[71,77],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F219395","Ibmcloud",[75,76],"VDB Entry","Vendor Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6558796","Ibm",[76],2,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",1,false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2022-22336? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22336, a high severity cyber security vulnerability from 2022. IBM Sterling External Authentication Server and IBM Sterlin...","CVE-2022-22336, CVE-2022-22336 vulnerability, CVE-2022-22336 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, ibm security, sterling_external_authentication_server vulnerability, sterling_secure_proxy vulnerability","\u002Fwhat-is\u002Fcve-2022-22336",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22336","Cybersecurity","CVE-2022-22336, CVE-2022-22336 vulnerability, CVE-2022-22336 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120],{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":123,"Negate":26,"CPEMatch":124},"OR",[125,127,129,131,133,135],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B36E8D05-DDAE-47C2-ACE6-289FD20AD7C1",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"41BDBD94-2DF8-48AC-9B26-2E72C9788385",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E139149B-2712-46EB-91A3-F06175FA83AD",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C577B025-AAD0-425B-A5D1-754D45904D5A",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2092419E-7646-489D-941A-8501411C5AE9",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"69654CFD-6AB4-419C-AE91-C9FBF689A23B",[],[],{"lastModified":11,"cacheTime":140,"version":39},1792285120260,{"score":142,"band":143,"action":144,"scoredAt":145},49,"Medium","Plan remediation","2026-10-16T06:53:39.766402+00:00"]