Engineering Requirements Management Doors Next (Ibm) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-03-03. Vendor: Ibm.

CVEs of Engineering Requirements Management Doors Next

• CVE-2025-13734 - CVSS 5.4 (medium), 2026-03-03: IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access…
• CVE-2025-2140 - CVSS 5.7 (medium), 2025-10-12: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the…
• CVE-2025-2139 - CVSS 3.5 (low), 2025-10-12: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users…
• CVE-2025-2138 - CVSS 3.5 (low), 2025-10-12: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users…
• CVE-2025-33096 - CVSS 6.5 (medium), 2025-10-12: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially…
• CVE-2024-43169 - CVSS 8.8 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of…
• CVE-2024-41771 - CVSS 7.5 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose…
• CVE-2024-41770 - CVSS 7.5 (high), 2025-03-03: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose…
• CVE-2023-45192 - CVSS 8.2 (high), 2024-06-06: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A…
• CVE-2021-20519 - CVSS 5.4 (medium), 2021-04-12: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2020-4920 - CVSS 6.4 (medium), 2021-04-12: IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
• CVE-2020-4965 - CVSS 7.5 (high), 2021-04-12: IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
• CVE-2020-4964 - CVSS 4.3 (medium), 2021-04-12: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application…
• CVE-2021-20357 - CVSS 5.4 (medium), 2021-01-27: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2020-4865 - CVSS 5.4 (medium), 2021-01-27: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2020-4855 - CVSS 5.4 (medium), 2021-01-27: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2020-4547 - CVSS 5.4 (medium), 2021-01-27: IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site,…
• CVE-2020-4524 - CVSS 5.4 (medium), 2021-01-27: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2020-4546 - CVSS 5.4 (medium), 2020-09-02: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
• CVE-2020-4522 - CVSS 5.4 (medium), 2020-09-02: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
• CVE-2020-4445 - CVSS 5.4 (medium), 2020-09-02: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
• CVE-2020-4542 - CVSS 5.4 (medium), 2020-08-04: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…