CVE-2025-33096

Published: Oct 12, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.

Affected (3)

Products: Ibm: Engineering Requirements Management Doors Next

Ibm

1 product

Engineering Requirements Management Doors Next

Configuration A

3 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ibm Engineering Requirements Management Doors Next	Version 7.0.2
Ibm Engineering Requirements Management Doors Next	Version 7.0.3
Ibm Engineering Requirements Management Doors Next	Version 7.1

Running on/with	Platform Versions
Ibm Aix	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (1)

https://www.ibm.com/support/pages/node/7247716

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.