VDB
CVE-2025-13723
CVE-2025-13723
PUBLISHED
CVSS 5.3 MEDIUM
Reported by ibm · Published March 13, 2026
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expired access token
Risk Scores
CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | Sterling Partner Engagement Manager | 6.2.3.0, 6.2.4.0 |
| IBM | Sterling Partner Engagement Manager | 6.2.3.0, 6.2.4.0 |
Timeline
- Sep 12, 2017 PoC Published
- Mar 13, 2026 CVE Published
- Mar 13, 2026 PoC Published
- Mar 13, 2026 CVE Updated
- Mar 14, 2026 EPSS Score
- Mar 15, 2026 EPSS Score
- Mar 17, 2026 EPSS Score
- Mar 18, 2026 EPSS Score
- Mar 19, 2026 EPSS Score
- Mar 21, 2026 EPSS Score
- Mar 22, 2026 EPSS Score
- Mar 23, 2026 EPSS Score