3.5
Low
CVE-2025-2138 IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
Description
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Requirements Management DOORS Next | 7.1 | No fix stated |
| Engineering Requirements Management DOORS Next 7.0 | 7.0.2 → 7.0.3 | No fix stated |
Other CVEs of Engineering Requirements Management DOORS Next
The 10 CVEs of Engineering Requirements Management DOORS Next →
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit…
5.4
Medium
CVE-2025-2139
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
3.5
Low
CVE-2025-2140
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
5.7
Medium
CVE-2025-33096
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a…
6.5
Medium