Engineering Requirements Management Doors

engineering_requirements_management_doors

Vendor: Ibm • 13 CVEs

CVEs (13)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-43190 1Ibm 2Engineering Requirements Management Doors Engineering Requirements Management Doors Web Access Jun 17, 2026 Jul 7, 2025 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.
CVE-2023-50304 1Ibm 2Engineering Requirements Management Doors Engineering Requirements Management Doors Web Access Jun 17, 2026 Jul 18, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensi...Show more IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335.Show less
CVE-2023-50305 1Ibm 2Engineering Requirements Management Doors Engineering Requirements Management Doors Web Access Jun 17, 2026 Mar 1, 2024 N/A· v4 5.1 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336.
CVE-2023-28949 1Ibm 2Engineering Requirements Management Doors Engineering Requirements Management Doors Web Access Jun 17, 2026 Mar 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trust...Show more IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216.Show less
CVE-2023-28525 1Ibm 2Engineering Requirements Management Doors Engineering Requirements Management Doors Web Access Jun 17, 2026 Mar 1, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052.Show less
CVE-2018-1457 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jun 27, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208.
CVE-2017-1567 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769.Show less
CVE-2017-1563 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763.Show less
CVE-2017-1545 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 6.8 MEDIUM· v3 2.1 LOW· v2 IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.
CVE-2017-1540 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808.Show less
CVE-2017-1532 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...Show more IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411.Show less
CVE-2017-1516 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hija...Show more IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.Show less
CVE-2017-1515 1Ibm 1Engineering Requirements Management Doors Feb 5, 2025 Jan 26, 2018 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825.