ER
Product
Engineering Requirements Management Doors Web Access
7
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add Engineering Requirements Management Doors Web Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50304 | 8.2 | Jul 18 | IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 9.7.2.8 |
| CVE-2024-25039 | 7.5 | Jul 30 | IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities Affected: 9.6.1.1 through 9.6.1.13; 9.7.2.1 through 9.7.2.11 |
| CVE-2023-28949 | 6.5 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 9.7.2.7 |
| CVE-2025-0152 | 6.1 | Jul 30 | IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities Affected: 9.6.1.1 through 9.6.1.13; 9.7.2.1 through 9.7.2.11 |
| CVE-2024-43190 | 5.9 | Jul 7 | IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using… Affected: 9.6 through 9.6.1.13; 9.7.2.9 |
| CVE-2023-50305 | 5.1 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 9.7.2.7 |
| CVE-2023-28525 | 4.8 | Mar 1 | IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting Affected: 9.7.2.7 |
Showing 7