CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7288365

Configurations

No configuration.

History

14 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 hasta 6.3.0.2, y 6.2.4.0 hasta 6.2.4.4 e IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 hasta 6.2.4.4 podría permitir a un usuario no autenticado causar una denegación de servicio en el servicio de correo electrónico debido a un control inadecuado de la frecuencia de interacción.

18 Sep 2026, 15:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-18 15:17

Updated : 2026-10-14 18:10

NVD link : CVE-2025-13882

Mitre link : CVE-2025-13882

CVE.ORG link : CVE-2025-13882

JSON object : View

Products Affected

No product.

CWE

CWE-799

Improper Control of Interaction Frequency

{"id": "CVE-2025-13882", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13882", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-18T16:20:46.706570Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.3.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_essentials_edition:6.2.4.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Sterling Partner Engagement Manager Essentials Edition", "versions": [{"status": "affected", "version": "6.3.0.0", "versionType": "semver", "lessThanOrEqual": "6.3.0.2"}, {"status": "affected", "version": "6.2.4.0", "versionType": "semver", "lessThanOrEqual": "6.2.4.4"}]}, {"cpes": ["cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_partner_engagement_manager_standard_edition:6.2.4.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Sterling Partner Engagement Manager Standard Edition", "versions": [{"status": "affected", "version": "6.2.4.0", "versionType": "semver", "lessThanOrEqual": "6.2.4.4"}]}]}], "published": "2026-09-18T15:17:04.197", "references": [{"url": "https://www.ibm.com/support/pages/node/7288365", "source": "psirt@us.ibm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-799"}]}], "descriptions": [{"lang": "en", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency."}, {"lang": "es", "value": "IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 hasta 6.3.0.2, y 6.2.4.0 hasta 6.2.4.4 e IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 hasta 6.2.4.4 podr\u00eda permitir a un usuario no autenticado causar una denegaci\u00f3n de servicio en el servicio de correo electr\u00f3nico debido a un control inadecuado de la frecuencia de interacci\u00f3n."}], "lastModified": "2026-10-14T18:10:00.207", "sourceIdentifier": "psirt@us.ibm.com"}