Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

IBM Sterling Partner Engagement Manager email service can be stopped

CVE-2025-13882 · published 1 month ago
Summary

Versions of IBM Sterling Partner Engagement Manager Essentials and Standard editions may let anyone send specially crafted requests that overload the email component, causing it to stop working. This can interrupt automated communications and affect business processes that rely on email notifications. Apply the latest updates from IBM to fix the issue and protect the email service.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm sterling partner engagement manager essentials edition <= 6.3.0.2
ibm sterling partner engagement manager standard edition <= 6.2.4.4
Original advisory text
Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-799Improper Control of Interaction Frequency
Timeline
Published18 Sep 2026
Updated4 Nov 2026
First seen18 Sep 2026
Sources
CVE-2025-13882 · NVD
CVE-2025-13882 · MITRE
Track software like this
Free during beta