PT-2026-25346 · Ibm · Ibm Sterling Partner Engagement Manager

Published 2026-03-13 · Updated 2026-03-13 · CVE-2025-13718

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2

Description The software may allow a remote attacker to obtain sensitive information in cleartext within a communication channel, potentially exposing it to unauthorized interception.

Recommendations Update IBM Sterling Partner Engagement Manager to a version later than 6.2.3.5. Update IBM Sterling Partner Engagement Manager to a version later than 6.2.4.2.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-13718

Affected Products

Ibm Sterling Partner Engagement Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-13718 · Security Note
• https://ibm.com/support/pages/node/7263391 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2032605905351565811 · Twitter Post