{"id":"CVE-2025-13882","aliases":["EUVD-2025-210934","GHSA-8m5f-wwr2-p32r"],"status":"published","title":"Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.","description":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4  could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0042,"percentile":0.36665,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-799"],"published":"2026-09-18T14:33:52Z","modified":"2026-10-14T18:10:00Z","products":[{"vendor":"ibm","product":"sterling partner engagement manager essentials edition"},{"vendor":"ibm","product":"sterling partner engagement manager standard edition"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7288365","tags":["vendor-advisory","patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13882"},{"url":"https://github.com/advisories/GHSA-8m5f-wwr2-p32r"}],"sources":{"cve":[{"id":"CVE-2025-13882","title":"Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.","description":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4  could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.","status":"published","published":"2026-09-18T14:33:52.057Z","modified":"2026-09-18T16:21:39.873Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-799"],"updated_at":"2026-11-02T14:32:43.437394Z"}],"euvd":[{"id":"EUVD-2025-210934","description":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4  could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.","status":"published","published":"2026-09-18T14:33:52Z","modified":"2026-09-18T16:21:39Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T17:28:08.412343Z"}],"ghsa":[{"id":"GHSA-8m5f-wwr2-p32r","title":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0...","description":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4  could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.","status":"published","published":"2026-09-18T15:32:19Z","modified":"2026-09-18T15:32:26Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-799"],"updated_at":"2026-11-02T15:12:10.152672Z"}],"nvd":[{"id":"CVE-2025-13882","description":"IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4  could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.","status":"published","published":"2026-09-18T15:17:04.197Z","modified":"2026-10-14T18:10:00.207Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-799"],"updated_at":"2026-11-02T14:12:03.20248Z"}]}}