PT-2026-25340 · Ibm · Ibm Sterling Partner Engagement Manager

Published 2026-03-13 · Updated 2026-03-13 · CVE-2025-14811

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2

Description The software may disclose sensitive information from the query string of an HTTP GET request. An attacker could potentially obtain this information using man-in-the-middle techniques.

Recommendations Update to a version later than 6.2.4.2.

Fix

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2025-14811

Affected Products

Ibm Sterling Partner Engagement Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-14811 · Security Note
• https://twitter.com/infoflowcloud/status/2032606669755072900 · Twitter Post
• https://ibm.com/support/pages/node/7263391 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2032605912347648478 · Twitter Post