ER
Product
Engineering Requirements Management DOORS Next
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 11Low 0
Watch
Add Engineering Requirements Management DOORS Next to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1457 | 9.8 | Jun 27 | An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges Affected: 9.5.1 through 9.5.1.9; 9.5.2 through 9.5.2.8; 9.6.0 through 9.6.0.7; 9.6.1 through 9.6.1.10; 9.7.0 through 9.7.2 |
| CVE-2023-50304 | 8.2 | Jul 18 | IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 9.7.2.8 |
| CVE-2024-41787 | 8.1 | Jan 10 | IBM Engineering Requirements Management DOORS Next code execution Affected: 7.0.2, 7.0.3 |
| CVE-2017-1545 | 6.8 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2023-28949 | 6.5 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 9.7.2.7 |
| CVE-2024-43190 | 5.9 | Jul 7 | IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using… Affected: 9.6 through 9.6.1.13; 9.7.2.9 |
| CVE-2017-1567 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1563 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1540 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1532 | 5.4 | Jan 26 | IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1516 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2023-50305 | 5.1 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 9.7.2.7 |
| CVE-2023-28525 | 4.8 | Mar 1 | IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting Affected: 9.7.2.7 |
| CVE-2017-1515 | 4.3 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
Showing 14