Engineering Requirements Management Doors (Ibm) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 92 known versions, newest CVE from 2025-07-07. Vendor: Ibm.
CVEs of Engineering Requirements Management Doors
- CVE-2024-43190 - CVSS 5.9 (medium), 2025-07-07: IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a…
- CVE-2024-41771 - CVSS 7.5 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose…
- CVE-2024-43169 - CVSS 8.8 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of…
- CVE-2024-41770 - CVSS 7.5 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose…
- CVE-2024-41787 - CVSS 9.8 (critical), 2025-01-10: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition.…
- CVE-2023-50304 - CVSS 8.2 (high), 2024-07-18: IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A…
- CVE-2023-50305 - CVSS 5.1 (medium), 2024-03-01: IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers…
- CVE-2023-28949 - CVSS 6.5 (medium), 2024-03-01: IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
- CVE-2023-28525 - CVSS 4.8 (medium), 2024-03-01: IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
- CVE-2018-1457 - CVSS 9.8 (critical), 2018-06-27: An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force…
- CVE-2017-1532 - CVSS 5.4 (medium), 2018-01-26: IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
- CVE-2017-1563 - CVSS 5.4 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2017-1516 - CVSS 5.4 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web…
- CVE-2017-1545 - CVSS 6.8 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials.…
- CVE-2017-1515 - CVSS 4.3 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID:…
- CVE-2017-1540 - CVSS 5.4 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2017-1567 - CVSS 5.4 (medium), 2018-01-26: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
