Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2025-14811

IBM Sterling Partner Engagement Manager Information Disclosure

Description

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling Partner Engagement Manager

  • 6.2.3.0 to ≤ 6.2.3.5affected
  • 6.2.4.0 to ≤ 6.2.4.2affected

References