IBM DOORS Next 7.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*
part: a version: 7.0.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Doors Next (1b3f9cdf-e61d-5bd8-824d-0e65f08dcbc5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41787 |
vulnerable | 2026-06-08 06:43:55.206865 |
IBM Engineering Requirements Management DOORS Next code execution
CRITICAL (9.8)
IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.
Published: 2025-01-10T13:18:51.866Z
Updated: 2025-01-10T14:48:26.216Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45192 |
vulnerable | 2026-06-08 06:12:42.154208 |
IBM Engineering Requirements Management DOORS Next XML external entity injection
HIGH (8.2)
IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758.
Published: 2024-06-06T18:49:05.734Z
Updated: 2024-08-02T20:14:19.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20519 |
vulnerable | 2026-06-08 05:29:09.401666 |
Details available
MEDIUM (5.4)
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
Published: 2021-04-12T18:00:25.456Z
Updated: 2024-09-16T22:24:46.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20351 |
vulnerable | 2026-06-08 05:29:09.119666 |
Details available
MEDIUM (5.4)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.
Published: 2021-03-04T19:05:44.675Z
Updated: 2024-09-17T00:10:34.504Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20350 |
vulnerable | 2026-06-08 05:29:09.118645 |
Details available
MEDIUM (5.4)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.
Published: 2021-03-04T19:05:43.976Z
Updated: 2024-09-16T17:28:43.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20340 |
vulnerable | 2026-06-08 05:29:09.081430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4975 |
vulnerable | 2026-06-08 05:26:41.271312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4965 |
vulnerable | 2026-06-08 05:26:41.238937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4964 |
vulnerable | 2026-06-08 05:26:41.235837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4920 |
vulnerable | 2026-06-08 05:26:41.180186 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4866 |
vulnerable | 2026-06-08 05:26:41.091640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4863 |
vulnerable | 2026-06-08 05:26:41.085922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4857 |
vulnerable | 2026-06-08 05:26:41.080092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4856 |
vulnerable | 2026-06-08 05:26:41.076410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.