Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-13723 EUVD-2025-208649GHSA-w6pq-fx2g-c9x6

IBM Sterling Partner Engagement Manager Information Disclosure

Published Mar 13, 2026 · Updated Mar 13, 2026 · Assigned by ibm

Vendor: IBM Product: Sterling Partner Engagement Manager

Description

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expired access token

Affected products

VendorProductAffectedFixed
IBM Sterling Partner Engagement Manager 6.2.3.0 – ≤ 6.2.3.5, 6.2.4.0 – ≤ 6.2.4.2 —

References