CVE-2025-2138lowCWE-602

CVE-2025-2138: falha de baixa gravidade em IBM Engineering Requirements Management Doors…

IBM Engineering Requirements Management Doors Next data modification

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Engineering Requirements Management DOORS Next

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.2%
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
IBM · Engineering Requirements Management Doors Next
CVEs relacionadas — IBM Engineering Requirements Management Doors…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-33096MEDIUMIBM Engineering Requirements Management Doors Next denial of serviceEPSS 0.3%CVE-2025-2139LOWIBM Engineering Requirements Management Doors Next security bypassEPSS 0.2%CVE-2025-2140MEDIUMIBM Engineering Requirements Management Doors Next spoofingEPSS 0.1%