IBM Sterling Partner Engagement Manager Essentials Edition versions 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4, as well as the Standard Edition versions 6.2.4.0 through 6.2.4.4, contain a vulnerability identified as CWE-799 (Improper Control of Interaction Frequency). This vulnerability permits an unauthenticated user to trigger a denial of service condition in the email service component by abusing the lack of proper rate limiting or interaction frequency controls.

An unauthenticated attacker can cause a denial of service in the email service of affected IBM Sterling Partner Engagement Manager products. This results in service disruption but does not impact confidentiality or integrity of data. The CVSS 3.1 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and impact limited to availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, consider implementing external rate limiting or monitoring to mitigate potential denial of service attempts targeting the email service.