Skip to content
Sign in
7.1 High

CVE-2023-50304 IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE)…

Description

IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335.

Affected products and versions

Product Affected versions Fixed in
Engineering Requirements Management DOORS 9.7.2.8 No fix stated

Other CVEs of Engineering Requirements Management DOORS

The 2 CVEs of Engineering Requirements Management DOORS →
CVE-2024-43190 IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to… 5.9 Medium
Track this CVE