3.5
Low
CVE-2025-2138 IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
Description
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Requirements Management DOORS Next | 7.1 | No fix stated |
| Engineering Requirements Management DOORS Next 7.0 | 7.0.2 → 7.0.3 | No fix stated |
Other CVEs of Engineering Requirements Management DOORS Next
The 11 CVEs of Engineering Requirements Management DOORS Next →
CVE-2024-41786
IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule
5.3
Medium
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit…
5.4
Medium
CVE-2025-2139
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
3.5
Low
CVE-2025-2140
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the…
5.7
Medium