Vulnerabilidades do Ibm Engineering Requirements Management Doors Next
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Engineering Requirements Management Doors Next: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:ibm:engineering_requirements_management_doors_next
CVE-2025-13734
Média · 5.4
CWE-863 03/03/2026
IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.
CVE-2025-33096
Média · 6.5
CWE-674 12/10/2025
IBM Engineering Requirements Management Doors Next denial of service
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.
CVE-2025-2140
Média · 5.7
CWE-346 12/10/2025
IBM Engineering Requirements Management Doors Next spoofing
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
CVE-2025-2139
Baixa · 3.5
CWE-602 12/10/2025
IBM Engineering Requirements Management Doors Next security bypass
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.
CVE-2025-2138
Baixa · 3.5
CWE-602 12/10/2025
IBM Engineering Requirements Management Doors Next data modification
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1
could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.