CVE-2025-13723CWE-324

IBM Sterling Partner Engagement Manager Information Disclosure

Medium · published March 13, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expired access token

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Weakness
CWE-324 · Use of a Key Past its Expiration Date
Published
2026-03-13T18:32Z
EPSS history
Timeline
  • 13 MAR 18:32Z
    IBM Sterling Partner Engagement Manager Information Disclosure
    cvelistv5