CVE-2025-0152 — IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities

CVE-2025-0152

IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / product	Versions
IBM / Engineering Requirements Management DOORS and DOORS Web Access	affected 9.7.2.1 through 9.7.2.11; affected 9.6.1.1 through 9.6.1.13

CWE

CWE-79

References

https://www.ibm.com/support/pages/node/7279145

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.