ER
Product
Engineering Requirements Management DOORS Next
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 11Low 0
Watch
Add Engineering Requirements Management DOORS Next to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1545 | 6.8 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2023-28949 | 6.5 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 9.7.2.7 |
| CVE-2024-43190 | 5.9 | Jul 7 | IBM Engineering Requirements Management DOORS weak authentication Affected: 9.7.2.9 |
| CVE-2017-1567 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1563 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1540 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1532 | 5.4 | Jan 26 | IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1516 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2023-50305 | 5.1 | Mar 1 | IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 9.7.2.7 |
| CVE-2023-28525 | 4.8 | Mar 1 | IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting Affected: 9.7.2.7 |
| CVE-2017-1515 | 4.3 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
Showing 11