DN
Product
DOORS Next
27
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 23Low 0
Watch
Add DOORS Next to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27253 | 10.0 | Aug 12 | IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request Affected: 7.0.3 through 7.0.3 Interim Fix 018 |
| CVE-2023-45192 | 8.2 | Jun 6 | IBM Engineering Requirements Management DOORS Next XML external entity injection Affected: 7.0.2; 7.0.3 |
| CVE-2024-41787 | 8.1 | Jan 10 | IBM Engineering Requirements Management DOORS Next code execution Affected: 7.0.2; 7.0.3 |
| CVE-2020-4965 | 7.5 | Apr 12 | IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.0.0; 7.0.1; 7.0.2 |
| CVE-2021-20519 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 7.0.0; 7.0.1; 7.0.2 |
| CVE-2020-4920 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to stored cross-site scripting Affected: 7.0.0; 7.0.1; 7.0.2 |
| CVE-2021-20351 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20350 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20340 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4975 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4866 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4863 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4857 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4856 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4733 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1 |
| CVE-2020-4697 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1 |
| CVE-2020-4691 | 5.4 | Jan 8 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1 |
| CVE-2020-4546 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4522 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4445 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2019-4748 | 5.4 | Jul 16 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4297 | 5.4 | Jun 19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4295 | 5.4 | Jun 19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4281 | 5.4 | Jun 19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 7.0 |
| CVE-2020-4964 | 4.3 | Apr 12 | IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to… Affected: 7.0.0; 7.0.1; 7.0.2 |
| CVE-2020-4544 | 4.3 | Jan 8 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 7.0; 7.0.1 |
| CVE-2020-4487 | 4.3 | Jan 8 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 7.0; 7.0.1 |
Showing 27