CVE-2025-2140mediumCWE-346

CVE-2025-2140: falha de média gravidade em IBM Engineering Requirements Management Doors…

IBM Engineering Requirements Management Doors Next spoofing

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Engineering Requirements Management DOORS Next

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.7epss 0.1%
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
IBM · Engineering Requirements Management Doors Next
CVEs relacionadas — IBM Engineering Requirements Management Doors…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-33096MEDIUMIBM Engineering Requirements Management Doors Next denial of serviceEPSS 0.3%CVE-2025-2138LOWIBM Engineering Requirements Management Doors Next data modificationEPSS 0.2%CVE-2025-2139LOWIBM Engineering Requirements Management Doors Next security bypassEPSS 0.2%