IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
IBM Sterling Partner Engagement Manager Essentials Edition affected
Version Status Constraints
6.3.0.0 affected ≤ 6.3.0.2
6.2.4.0 affected ≤ 6.2.4.4
IBM Sterling Partner Engagement Manager Standard Edition affected
Version Status Constraints
6.2.4.0 affected ≤ 6.2.4.4

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Ibm Subscribe
Sterling Partner Engagement Manager Essentials Edition Subscribe
Sterling Partner Engagement Manager Standard Edition Subscribe
Advisories

No advisories yet.

Fixes

Solution

IBM strongly recommends addressing the vulnerability now by upgrading to the remediated version below: Product(s)Affected Version RangeRemediated VersionInstructions / DownloadIBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 – 6.3.0.26.3.0.3Download 6.3.0.3IBM Sterling Partner Engagement Manager Essentials Edition6.2.4.0 – 6.2.4.46.2.4.5Download 6.2.4.5IBM Sterling Partner Engagement Manager Standard Edition6.2.4.0 – 6.2.4.46.2.4.5Download 6.2.4.5

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.ibm.com/support/pages/node/7288365 cve-icon
History

Fri, 18 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Description IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
Title Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
First Time appeared Ibm
Ibm sterling Partner Engagement Manager Essentials Edition
Ibm sterling Partner Engagement Manager Standard Edition
Weaknesses CWE-799
CPEs cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm sterling Partner Engagement Manager Essentials Edition
Ibm sterling Partner Engagement Manager Standard Edition
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-18T14:33:52.057Z

Reserved: 2025-12-02T14:12:25.205Z

Link: CVE-2025-13882

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses