CVE-2025-2140mediumCWE-346

CVE-2025-2140: medium-severity vulnerability in IBM Engineering Requirements Management Doors…

IBM Engineering Requirements Management Doors Next spoofing

Published · Updated

Follow this CVE+ Monitor Engineering Requirements Management DOORS Next

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.7epss 0.1%
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
IBM · Engineering Requirements Management Doors Next
Related CVEs — IBM Engineering Requirements Management Doors…

In the same product, most dangerous first.

CVE-2025-33096MEDIUMIBM Engineering Requirements Management Doors Next denial of serviceEPSS 0.3%CVE-2025-2138LOWIBM Engineering Requirements Management Doors Next data modificationEPSS 0.2%CVE-2025-2139LOWIBM Engineering Requirements Management Doors Next security bypassEPSS 0.2%