CVE-2025-33093: IBM Sterling Partner Engagement Manager

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret.

Affected products

• IBM Sterling Partner Engagement Manager: version 6.1.0 only; version 6.1.2 only; version 6.2.0 only; version 6.2.2 only

Published 2025-05-07. Last modified 2026-06-17.