Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*

part: a version: 7.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Requirements Management Doors Next (94e4f952-b73e-5278-9116-1eca12539203)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-33096 vulnerable 2026-06-08 07:19:01.733757 IBM Engineering Requirements Management Doors Next denial of service
MEDIUM (6.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.
Published: 2025-10-12T13:31:04.723Z
Updated: 2025-10-14T15:26:02.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2140 vulnerable 2026-06-08 07:14:58.081337 IBM Engineering Requirements Management Doors Next spoofing
MEDIUM (5.7)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
Published: 2025-10-12T13:33:22.545Z
Updated: 2025-10-14T14:53:08.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2139 vulnerable 2026-06-08 07:14:58.080733 IBM Engineering Requirements Management Doors Next security bypass
LOW (3.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.
Published: 2025-10-12T13:35:24.921Z
Updated: 2025-10-14T14:48:18.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2138 vulnerable 2026-06-08 07:14:58.079495 IBM Engineering Requirements Management Doors Next data modification
LOW (3.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
Published: 2025-10-12T13:37:02.296Z
Updated: 2025-10-14T15:10:47.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43169 vulnerable 2026-06-08 06:45:49.739369 IBM Engineering Requirements Management DOORS Next file download
HIGH (8.8)
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code.
Published: 2025-03-03T15:27:29.620Z
Updated: 2026-02-26T19:09:47.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41771 vulnerable 2026-06-08 06:43:55.155013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41770 vulnerable 2026-06-08 06:43:55.153101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45192 vulnerable 2026-06-08 06:12:42.153555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.