How severe is CVE-2025-13882?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in IBM Sterling Partner Engagement Manager Essentials Edition

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Ibm Sterling Partner Engagement Manager Essentials Edition
Ibm Sterling Partner Engagement Manager Standard Edition

Weakness classification (CWE)

CWE-799

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2025-13882?: CVE-2025-13882 is a medium-severity vulnerability in IBM Sterling Partner Engagement Manager Essentials Edition, classified under CWE-799. CVSS score: 5.3/10. Published 2026-09-18.
How severe is CVE-2025-13882?: Medium severity. CVSS v3 base score is 5.3 out of 10.