ER
Product
Engineering Requirements Management DOORS Next
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 12Low 0
Watch
Add Engineering Requirements Management DOORS Next to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1457 | 9.8 | Jun 27 | An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges Affected: 9.5.1 through 9.5.1.9; 9.5.2 through 9.5.2.8; 9.6.0 through 9.6.0.7; 9.6.1 through 9.6.1.10; 9.7.0 through 9.7.2 |
| CVE-2023-50304 | 8.2 | Jul 18 | IBM Engineering Requirements Management DOORS XML external entity injection Affected: 9.7.2.8 |
| CVE-2024-41787 | 8.1 | Jan 10 | IBM Engineering Requirements Management DOORS Next code execution Affected: 7.0.2, 7.0.3 |
| CVE-2024-41771 | 7.5 | Mar 3 | IBM Engineering Requirements Management DOORS Next information disclosure Affected: 7.0.2; 7.0.3; 7.1 |
| CVE-2024-41770 | 7.5 | Mar 3 | IBM Engineering Requirements Management DOORS Next information disclosure Affected: 7.0.2; 7.0.3; 7.1 |
| CVE-2017-1545 | 6.8 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2024-43169 | 6.5 | Mar 3 | IBM Engineering Requirements Management DOORS Next file download Affected: 7.0.2; 7.0.3; 7.1 |
| CVE-2023-28949 | 6.5 | Mar 1 | IBM Engineering Requirements Management cross-site request forgery Affected: 9.7.2.7 |
| CVE-2024-43190 | 5.9 | Jul 7 | IBM Engineering Requirements Management DOORS weak authentication Affected: 9.7.2.9 |
| CVE-2017-1567 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1563 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1540 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1532 | 5.4 | Jan 26 | IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2017-1516 | 5.4 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
| CVE-2023-50305 | 5.1 | Mar 1 | IBM Engineering Requirements Management information disclosure Affected: 9.7.2.7 |
| CVE-2023-28525 | 4.8 | Mar 1 | IBM Engineering Requirements Management cross-site scripting Affected: 9.7.2.7 |
| CVE-2017-1515 | 4.3 | Jan 26 | IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses Affected: 9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 |
Showing 17