CVE-2025-13726CWE-209

IBM Sterling Partner Engagement Manager Information Disclosure

Medium · published March 13, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-03-13T18:26Z
EPSS history
Timeline
  • 13 MAR 18:26Z
    IBM Sterling Partner Engagement Manager Information Disclosure
    cvelistv5