Ibm Engineering Requirements Management Doors Next vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Engineering Requirements Management Doors Next: 5 record(s), with affected versions and fixes.cpe:2.3:a:ibm:engineering_requirements_management_doors_next
CVE-2025-13734
Medium · 5.4
CWE-863 Mar 3, 2026
IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.
CVE-2025-33096
Medium · 6.5
CWE-674 Oct 12, 2025
IBM Engineering Requirements Management Doors Next denial of service
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.
CVE-2025-2140
Medium · 5.7
CWE-346 Oct 12, 2025
IBM Engineering Requirements Management Doors Next spoofing
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
CVE-2025-2139
Low · 3.5
CWE-602 Oct 12, 2025
IBM Engineering Requirements Management Doors Next security bypass
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.
CVE-2025-2138
Low · 3.5
CWE-602 Oct 12, 2025
IBM Engineering Requirements Management Doors Next data modification
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1
could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.