CVE-2024-41786: medium-severity vulnerability in IBM Engineering Requirements Management DOORS…
IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · Engineering Requirements Management DOORS NextRelated CVEs — IBM Engineering Requirements Management DOORS…
In the same product, most dangerous first.
CVE-2024-41787CRITICALIBM Engineering Requirements Management DOORS Next code executionEPSS 1.1%CVE-2023-45192HIGHIBM Engineering Requirements Management DOORS Next XML external entity injectionEPSS 0.7%CVE-2024-41771HIGHIBM Engineering Requirements Management DOORS Next information disclosureEPSS 0.5%CVE-2024-41770HIGHIBM Engineering Requirements Management DOORS Next information disclosureEPSS 0.5%CVE-2024-43169HIGHIBM Engineering Requirements Management DOORS Next file downloadEPSS 0.2%CVE-2025-13734MEDIUMIBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissionsEPSS 0.2%