Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-2138

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.

Published

2025-10-12T14:15:36.023

Last Modified

2025-10-16T14:25:30.260

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

Weaknesses
  • Type: Primary
    CWE-602
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm engineering_requirements_management_doors_next 7.0.2 Yes
Application ibm engineering_requirements_management_doors_next 7.0.3 Yes
Application ibm engineering_requirements_management_doors_next 7.1 Yes
Operating System ibm aix - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
References