cve.bz

CVE-2025-14811

5.9 mediumEPSS 0.2%

Medium (5.9) in ibm sterling partner engagement manager. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

Severity

CVSS 3.1

5.9 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE
CWE-598
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON