What’s Vulnerable › Vulnerabilities
CVE-2025-2140: IBM Engineering Requirements Management Doors Next spoofing
- Severity: medium (CVSS 5.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-12 · updated 2026-10-08
- Weakness: CWE-346
Description
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
Affected products
- IBM Engineering Requirements Management DOORS Next: 7.0.2, 7.0.3, 7.1
References
Get alerted when CVE-2025-2140 or the next vulnerability affects your stack