Engineering Requirements Management Doors Next
Monthly
Engineering Requirements Management Doors Next versions up to 7.1 is affected by missing authorization (CVSS 5.4).
An authenticated user can cause a denial-of-service condition in IBM DOORS Next versions 7.0.2, 7.0.3, and 7.1 by uploading a specially crafted file that triggers uncontrolled recursion (CWE-674) during server-side parsing, leading to high availability impact while confidentiality and integrity remain unaffected. Exploitation requires valid credentials and access to the file-upload functionality, so the attack surface is limited to authenticated insiders or compromised accounts. No public exploit code has been identified at time of analysis, and EPSS is low at 0.31% (21st percentile), suggesting limited near-term exploitation likelihood.
Email sender-identity spoofing in IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 allows an authenticated user on the adjacent network to forge the sender identity of email generated by the application, because the product performs improper verification of source data (CWE-346). Exploitation requires valid credentials (PR:L) and an adjacent-network position (AV:A) rather than internet exposure, needs no user interaction (UI:N), and is low complexity (AC:L); impact is confined to integrity (I:H) with no confidentiality or availability loss. No public exploit code has been identified at time of analysis and the EPSS score of 0.12% (2nd percentile) indicates a low likelihood of real-world exploitation; this is a moderate-severity integrity issue rather than a top patching priority.
Authenticated users of IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 can delete review artifacts belonging to other users because review-deletion authorization is enforced only in the client-side UI while the underlying server endpoint performs no equivalent check (CWE-602, client-side enforcement of server-side security). The issue requires a valid authenticated account (CVSS PR:L), needs no user interaction or non-default configuration, and is limited to integrity impact - no confidentiality loss and no denial of service - with IBM rating it adjacent-network (AV:A) while the independent assessment rates it network-reachable (AV:N); both agree impact is low. There is no public exploit identified at time of analysis and the CVE is not in CISA KEV, and the EPSS score is 0.18% (7th percentile), consistent with a genuinely low-priority, authenticated-only integrity flaw rather than an actively exploited one.
Authenticated users of IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 can delete comments made by other users because comment-deletion authorization is enforced only in the client interface rather than rechecked on the server. This CWE-602 flaw requires a valid account and adjacent-network access per the CVSS vector (AV:A/PR:L), yields only a low integrity impact (CVSS 3.5), and has no public exploit identified at time of analysis, with an EPSS score of 0.18%. The practical risk is low, consistent with the vendor's rating.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Jazz Team Server products are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
IBM Jazz Foundation products is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Engineering Requirements Management Doors Next versions up to 7.1 is affected by missing authorization (CVSS 5.4).
An authenticated user can cause a denial-of-service condition in IBM DOORS Next versions 7.0.2, 7.0.3, and 7.1 by uploading a specially crafted file that triggers uncontrolled recursion (CWE-674) during server-side parsing, leading to high availability impact while confidentiality and integrity remain unaffected. Exploitation requires valid credentials and access to the file-upload functionality, so the attack surface is limited to authenticated insiders or compromised accounts. No public exploit code has been identified at time of analysis, and EPSS is low at 0.31% (21st percentile), suggesting limited near-term exploitation likelihood.
Email sender-identity spoofing in IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 allows an authenticated user on the adjacent network to forge the sender identity of email generated by the application, because the product performs improper verification of source data (CWE-346). Exploitation requires valid credentials (PR:L) and an adjacent-network position (AV:A) rather than internet exposure, needs no user interaction (UI:N), and is low complexity (AC:L); impact is confined to integrity (I:H) with no confidentiality or availability loss. No public exploit code has been identified at time of analysis and the EPSS score of 0.12% (2nd percentile) indicates a low likelihood of real-world exploitation; this is a moderate-severity integrity issue rather than a top patching priority.
Authenticated users of IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 can delete review artifacts belonging to other users because review-deletion authorization is enforced only in the client-side UI while the underlying server endpoint performs no equivalent check (CWE-602, client-side enforcement of server-side security). The issue requires a valid authenticated account (CVSS PR:L), needs no user interaction or non-default configuration, and is limited to integrity impact - no confidentiality loss and no denial of service - with IBM rating it adjacent-network (AV:A) while the independent assessment rates it network-reachable (AV:N); both agree impact is low. There is no public exploit identified at time of analysis and the CVE is not in CISA KEV, and the EPSS score is 0.18% (7th percentile), consistent with a genuinely low-priority, authenticated-only integrity flaw rather than an actively exploited one.
Authenticated users of IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 can delete comments made by other users because comment-deletion authorization is enforced only in the client interface rather than rechecked on the server. This CWE-602 flaw requires a valid account and adjacent-network access per the CVSS vector (AV:A/PR:L), yields only a low integrity impact (CVSS 3.5), and has no public exploit identified at time of analysis, with an EPSS score of 0.18%. The practical risk is low, consistent with the vendor's rating.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
IBM Jazz Team Server products are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
IBM Jazz Foundation products is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.