PT-2026-25345 · Ibm · Ibm Sterling Partner Engagement Manager

Published 2026-03-13 · Updated 2026-03-13 · CVE-2025-13702

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2

Description The software is susceptible to a cross-site scripting issue. An authenticated user can inject arbitrary JavaScript code into the web user interface, potentially altering intended functionality and leading to the disclosure of credentials within a trusted session.

Recommendations IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 should be updated. IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2 should be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-13702

Affected Products

Ibm Sterling Partner Engagement Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-13702 · Security Note
• https://ibm.com/support/pages/node/7263391 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2032605904252666093 · Twitter Post