Skip to content
Sign in
6.1 Medium

CVE-2025-0152 IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through…

Description

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Engineering Requirements Management DOORS and DOORS Web Access 9.7 9.7.2.1 → 9.7.2.11 No fix stated
Engineering Requirements Management DOORS and DOORS Web Access 9.6 9.6.1.1 → 9.6.1.13 No fix stated

Other CVEs of Engineering Requirements Management DOORS and DOORS Web Access

The 2 CVEs of Engineering Requirements Management DOORS and DOORS Web Access →
CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through… 7.5 High
Track this CVE