Engineering Requirements Management Doors Web Access (Ibm) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-07-30. Vendor: Ibm.
CVEs of Engineering Requirements Management Doors Web Access
- CVE-2024-25039 - CVSS 7.5 (high), 2026-07-30: IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a…
- CVE-2025-0152 - CVSS 6.1 (medium), 2026-07-30: IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site…
- CVE-2024-43190 - CVSS 5.9 (medium), 2025-07-07: IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a…
- CVE-2023-50304 - CVSS 8.2 (high), 2024-07-18: IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A…
- CVE-2023-50305 - CVSS 5.1 (medium), 2024-03-01: IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers…
- CVE-2023-28949 - CVSS 6.5 (medium), 2024-03-01: IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
- CVE-2023-28525 - CVSS 4.8 (medium), 2024-03-01: IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…