Vulnerability in Ibm Sterling Partner Engagement Manager
CVE-2025-14811
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained us…
EPSS: 0.002 (10.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Sterling Partner Engagement Manager — versions 6.2.3.0, 6.2.4.0
- Ibm Sterling_partner_engagement_manager
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-14811?
- CVE-2025-14811 is a low-severity vulnerability in Ibm Sterling Partner Engagement Manager, classified under CWE-598. CVSS score: 3.1/10. Published 2026-03-13.
- How severe is CVE-2025-14811?
- Low severity. CVSS v3 base score is 3.1 out of 10.