Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

13 records in Engineering Requirements Management Doors · all components

Priority LOW 28

IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trust…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00247 Published 2024-03-01 No fix listed CWE-352
Priority LOW 27

IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01196 Published 2018-01-26 No fix listed CWE-20
Priority LOW 26

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0035 Published 2025-07-07 No fix listed CWE-640
TI-2017-01259 CVE-2017-1567 · GHSA-xr3x-fw3p-85fp

Cross-site scripting in IBM Rational DOORS

Priority LOW 26

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00942 Published 2018-01-26 No fix listed CWE-79
TI-2017-01256 CVE-2017-1563 · GHSA-cv3p-mqv3-gjq2

Cross-site scripting in IBM Rational DOORS

Priority LOW 26

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00942 Published 2018-01-26 No fix listed CWE-79
TI-2017-01236 CVE-2017-1540 · GHSA-64gc-gm28-vcwg

Cross-site scripting in IBM Rational DOORS

Priority LOW 26

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00942 Published 2018-01-26 No fix listed CWE-79
TI-2017-01229 CVE-2017-1532 · GHSA-4m5h-xc8m-h5hp

Cross-site scripting in IBM Rational DOORS

Priority LOW 26

IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00942 Published 2018-01-26 No fix listed CWE-79
Priority LOW 23

IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00201 Published 2024-03-01 No fix listed CWE-521
Priority LOW 23

IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01248 Published 2018-01-26 No fix listed CWE-200
Open these records in search →