PT-2026-25347 · Ibm · Ibm Sterling Partner Engagement Manager

Published 2026-03-13 · Updated 2026-03-13 · CVE-2025-13723

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2

Description The software potentially allows an attacker to gain access to sensitive user information by utilizing an expired access token.

Recommendations Update IBM Sterling Partner Engagement Manager to a version later than 6.2.3.5. Update IBM Sterling Partner Engagement Manager to a version later than 6.2.4.2.

Fix

Weakness Enumeration

CWE-324

Related Identifiers

CVE-2025-13723

Affected Products

Ibm Sterling Partner Engagement Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-13723 · Security Note
• https://ibm.com/support/pages/node/7263391 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2032605906525942049 · Twitter Post