CVE-2025-13882

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13882", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-12-02T14:12:25.205Z", "datePublished": "2026-09-18T14:33:52.057Z", "dateUpdated": "2026-09-18T16:21:39.873Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T14:33:52.057Z"}, "title": "Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-799", "description": "CWE-799 Improper Control of Interaction Frequency", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Sterling Partner Engagement Manager Essentials Edition", "versions": [{"status": "affected", "version": "6.3.0.0", "lessThanOrEqual": "6.3.0.2", "versionType": "semver"}, {"status": "affected", "version": "6.2.4.0", "lessThanOrEqual": "6.2.4.4", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "Sterling Partner Engagement Manager Standard Edition", "versions": [{"status": "affected", "version": "6.2.4.0", "lessThanOrEqual": "6.2.4.4", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7288365", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading to the remediated version below:\nProduct(s)Affected Version RangeRemediated VersionInstructions / DownloadIBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 \u2013 6.3.0.26.3.0.3Download 6.3.0.3IBM Sterling Partner Engagement Manager Essentials Edition6.2.4.0 \u2013 6.2.4.46.2.4.5Download 6.2.4.5IBM Sterling Partner Engagement Manager Standard Edition6.2.4.0 \u2013 6.2.4.46.2.4.5Download 6.2.4.5", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading to the remediated version below:</p><div><table><colgroup><col/><col/><col/><col/></colgroup><tbody><tr><th>Product(s)</th><th>Affected Version Range</th><th>Remediated Version</th><th>Instructions / Download</th></tr><tr><td>IBM Sterling Partner Engagement Manager Essentials Edition\u00a0</td><td>6.3.0.0 \u2013 6.3.0.2</td><td>6.3.0.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Essentials_6.3.0.3&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.3.0.3</a></td></tr><tr><td>IBM Sterling Partner Engagement Manager Essentials Edition</td><td>6.2.4.0 \u2013 6.2.4.4</td><td>6.2.4.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Essentials_6.2.4.5&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.2.4.5</a></td></tr><tr><td>IBM Sterling Partner Engagement Manager Standard Edition</td><td>6.2.4.0 \u2013 6.2.4.4</td><td>6.2.4.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Standard_6.2.4.5&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.2.4.5</a></td></tr></tbody></table></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-18T16:20:46.706570Z", "id": "CVE-2025-13882", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-18T16:21:39.873Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13882", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-18T16:20:46.706570Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-18T16:20:58.146Z"}}], "cna": {"title": "Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Sterling Partner Engagement Manager Essentials Edition", "versions": [{"status": "affected", "version": "6.3.0.0", "versionType": "semver", "lessThanOrEqual": "6.3.0.2"}, {"status": "affected", "version": "6.2.4.0", "versionType": "semver", "lessThanOrEqual": "6.2.4.4"}]}, {"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Sterling Partner Engagement Manager Standard Edition", "versions": [{"status": "affected", "version": "6.2.4.0", "versionType": "semver", "lessThanOrEqual": "6.2.4.4"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading to the remediated version below:\nProduct(s)Affected Version RangeRemediated VersionInstructions / DownloadIBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 \u2013 6.3.0.26.3.0.3Download 6.3.0.3IBM Sterling Partner Engagement Manager Essentials Edition6.2.4.0 \u2013 6.2.4.46.2.4.5Download 6.2.4.5IBM Sterling Partner Engagement Manager Standard Edition6.2.4.0 \u2013 6.2.4.46.2.4.5Download 6.2.4.5", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading to the remediated version below:</p><div><table><colgroup><col/><col/><col/><col/></colgroup><tbody><tr><th>Product(s)</th><th>Affected Version Range</th><th>Remediated Version</th><th>Instructions / Download</th></tr><tr><td>IBM Sterling Partner Engagement Manager Essentials Edition\u00a0</td><td>6.3.0.0 \u2013 6.3.0.2</td><td>6.3.0.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Essentials_6.3.0.3&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.3.0.3</a></td></tr><tr><td>IBM Sterling Partner Engagement Manager Essentials Edition</td><td>6.2.4.0 \u2013 6.2.4.4</td><td>6.2.4.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Essentials_6.2.4.5&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.2.4.5</a></td></tr><tr><td>IBM Sterling Partner Engagement Manager Standard Edition</td><td>6.2.4.0 \u2013 6.2.4.4</td><td>6.2.4.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm%2FOther+software%2FIBM+Sterling+Partner+Engagement+Manager+Software&amp;fixids=IBM_PEM_Standard_6.2.4.5&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"nofollow\">Download 6.2.4.5</a></td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7288365", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-799", "description": "CWE-799 Improper Control of Interaction Frequency"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T14:33:52.057Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13882", "state": "PUBLISHED", "dateUpdated": "2026-09-18T16:21:39.873Z", "dateReserved": "2025-12-02T14:12:25.205Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-09-18T14:33:52.057Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*"], "product": "Sterling Partner Engagement Manager Essentials Edition", "vendor": "IBM", "versions": [{"lessThanOrEqual": "6.3.0.2", "status": "affected", "version": "6.3.0.0", "versionType": "semver"}, {"lessThanOrEqual": "6.2.4.4", "status": "affected", "version": "6.2.4.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*"], "product": "Sterling Partner Engagement Manager Standard Edition", "vendor": "IBM", "versions": [{"lessThanOrEqual": "6.2.4.4", "status": "affected", "version": "6.2.4.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency."}, {"lang": "es", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 hasta 6.3.0.2, y 6.2.4.0 hasta 6.2.4.4 e IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 hasta 6.2.4.4 podr\u00eda permitir a un usuario no autenticado causar una denegaci\u00f3n de servicio en el servicio de correo electr\u00f3nico debido a un control inadecuado de la frecuencia de interacci\u00f3n."}], "id": "CVE-2025-13882", "lastModified": "2026-10-14T18:10:00.207", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13882", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-18T16:20:46.706570Z", "version": "2.0.3"}}]}, "published": "2026-09-18T15:17:04.197", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7288365"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-799"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.3.0.0,6.3.0.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.2.4.0,6.2.4.4]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Sterling Partner Engagement Manager Essentials Edition", "source": "cna", "vendor": "IBM"}, "product": "sterling_partner_engagement_manager_essentials_edition", "vendor": "ibm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.2.4.0,6.2.4.4]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Sterling Partner Engagement Manager Standard Edition", "source": "cna", "vendor": "IBM"}, "product": "sterling_partner_engagement_manager_standard_edition", "vendor": "ibm"}], "created": "2026-09-18T21:00:15.181182+00:00", "updated": "2026-09-19T18:15:02.227670+00:00", "vendors": ["ibm", "ibm$PRODUCT$sterling_partner_engagement_manager_essentials_edition", "ibm$PRODUCT$sterling_partner_engagement_manager_standard_edition"]}