CVE-2025-2140

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
References
Link Resource
https://www.ibm.com/support/pages/node/7247716 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Oct 2025, 14:32

Type Values Removed Values Added
First Time Linux
Ibm aix
Microsoft
Ibm
Ibm engineering Requirements Management Doors Next
Microsoft windows
Linux linux Kernel
CPE cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7247716 - () https://www.ibm.com/support/pages/node/7247716 - Vendor Advisory

12 Oct 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-12 14:15

Updated : 2025-10-16 14:32


NVD link : CVE-2025-2140

Mitre link : CVE-2025-2140

CVE.ORG link : CVE-2025-2140


JSON object : View

Products Affected

microsoft

  • windows

linux

  • linux_kernel

ibm

  • aix
  • engineering_requirements_management_doors_next
CWE
CWE-346

Origin Validation Error