Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 16

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00187 Published 2025-10-12 No fix listed CWE-602
Priority LOW 16

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00187 Published 2025-10-12 No fix listed CWE-602
Priority LOW 25

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00127 Published 2025-10-12 No fix listed CWE-346
Priority LOW 29

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00313 Published 2025-10-12 No fix listed CWE-674