VULNERABILITY INTELLIGENCE

CVE-2025-2140

CVSS score5.7 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2025-10-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

Weakness classification

  • CWE-346: Origin Validation Error

Primary references