GHSA-m2h3-rp3m-p73r

GHSA-m2h3-rp3m-p73r PUBLISHED CVSS 3.0999999046325684 LOW

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

Risk Scores

CVSS 3.1

3.0999999046325684

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Timeline

Mar 13, 2026 CVE Published
Apr 10, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2025-14811 advisory
https://www.ibm.com/support/pages/node/7263391 url

Open in Interactive Console →