CveMateVulnerability intelligence

IBM Engineering Requirements Management Doors Next vulnerabilities

23 vulnerabilities

Known vulnerabilities in IBM Engineering Requirements Management Doors Next, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-20519ibmcollaborative_lifecycle_management+155y ago12-04-2021 18:00

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.CVE-2021-20357ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.CVE-2025-2138ibmengineering_requirements_management_doors_next1y ago12-10-2025 13:37

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.CVE-2025-2140ibmengineering_requirements_management_doors_next1y ago12-10-2025 13:33

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.CVE-2025-2139ibmengineering_requirements_management_doors_next1y ago12-10-2025 13:35

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.CVE-2025-13734ibmengineering_requirements_management_doors_next7mo ago03-03-2026 19:51

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.CVE-2025-33096ibmengineering_requirements_management_doors_next1y ago12-10-2025 13:31

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.CVE-2020-4855ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457.CVE-2020-4524ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434.CVE-2020-4522ibmdoors_next+106y ago02-09-2020 18:25

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.CVE-2020-4865ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.CVE-2020-4964ibmcollaborative_lifecycle_management+155y ago12-04-2021 18:00

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.CVE-2020-4445ibmdoors_next+106y ago02-09-2020 18:25

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.CVE-2020-4920ibmcollaborative_lifecycle_management+155y ago12-04-2021 18:00

IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.CVE-2020-4547ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.CVE-2020-4542ibmengineering_requirements_management_doors_next+16y ago04-08-2020 16:00

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 183046.CVE-2020-4965ibmcollaborative_lifecycle_management+155y ago12-04-2021 18:00

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.CVE-2020-4546ibmdoors_next+106y ago02-09-2020 18:25

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.CVE-2024-41787ibmdoors_next+11y ago10-01-2025 13:18

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.CVE-2024-41771ibmengineering_requirements_management_doors_next1y ago03-03-2025 15:29

IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.