CVE-2025-13882

Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

CVSS 3.1 5.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2025-13882

Published

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-13882

Published

Sterling Partner Engagement Manager Essentials Edition

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Sterling Partner Engagement Manager Essentials Edition",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "6.3.0.0",
                            "lessThanOrEqual": "6.3.0.2",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "6.2.4.0",
                            "lessThanOrEqual": "6.2.4.4",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*"
                    ]
                }

Sterling Partner Engagement Manager Standard Edition

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Sterling Partner Engagement Manager Standard Edition",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "6.2.4.0",
                            "lessThanOrEqual": "6.2.4.4",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON