5.7
Medium
CVE-2025-2140 IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
Description
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Requirements Management DOORS Next | 7.1 | No fix stated |
| Engineering Requirements Management DOORS Next 7.0 | 7.0.2 → 7.0.3 | No fix stated |
Other CVEs of Engineering Requirements Management DOORS Next
The 10 CVEs of Engineering Requirements Management DOORS Next →
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit…
5.4
Medium
CVE-2025-2138
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
3.5
Low
CVE-2025-2139
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
3.5
Low
CVE-2025-33096
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a…
6.5
Medium