CVE Intelligence

Ibm Engineering Requirements Management Doors Web Access vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Engineering Requirements Management Doors Web Access: 2 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:engineering_requirements_management_doors_web_access

CVE-2025-0152 Medium · 6.1 CWE-79 Jul 30, 2026
IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities
IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2024-25039 High · 7.5 CWE-400 Jul 30, 2026
IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities
IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive.