Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Requirements Management Doors Next (94e4f952-b73e-5278-9116-1eca12539203)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-33096 vulnerable 2026-06-08 07:19:01.734572 IBM Engineering Requirements Management Doors Next denial of service
MEDIUM (6.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.
Published: 2025-10-12T13:31:04.723Z
Updated: 2025-10-14T15:26:02.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2140 vulnerable 2026-06-08 07:14:58.081438 IBM Engineering Requirements Management Doors Next spoofing
MEDIUM (5.7)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
Published: 2025-10-12T13:33:22.545Z
Updated: 2025-10-14T14:53:08.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2139 vulnerable 2026-06-08 07:14:58.080760 IBM Engineering Requirements Management Doors Next security bypass
LOW (3.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.
Published: 2025-10-12T13:35:24.921Z
Updated: 2025-10-14T14:48:18.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2138 vulnerable 2026-06-08 07:14:58.080033 IBM Engineering Requirements Management Doors Next data modification
LOW (3.5)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
Published: 2025-10-12T13:37:02.296Z
Updated: 2025-10-14T15:10:47.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13734 vulnerable 2026-06-08 07:06:32.589854 IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions
MEDIUM (5.4)
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.
Published: 2026-03-03T19:51:48.142Z
Updated: 2026-03-04T21:15:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43169 vulnerable 2026-06-08 06:45:49.740026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41771 vulnerable 2026-06-08 06:43:55.155110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41770 vulnerable 2026-06-08 06:43:55.154211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.