Ibm Engineering Requirements Management Doors Web Access — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Engineering Requirements Management Doors Web Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-25039 — CVSS 7.5 (high): IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the…
• CVE-2023-50304 — CVSS 7.1 (high): IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when…
• CVE-2023-28949 — CVSS 6.5 (medium): IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute…
• CVE-2025-0152 — CVSS 6.1 (medium): IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to…
• CVE-2024-43190 — CVSS 5.9 (medium): IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset…
• CVE-2023-50305 — CVSS 5.1 (medium): IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it…
• CVE-2023-28525 — CVSS 4.8 (medium): IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…