CVE-2025-2140

I

BM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

References
Link Resource
https://www.ibm.com/support/pages/node/7247716 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Oct 2025, 14:32

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7247716 - () https://www.ibm.com/support/pages/node/7247716 - Vendor Advisory
CPE cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
First Time Ibm aix
Microsoft windows
Microsoft
Linux linux Kernel
Ibm engineering Requirements Management Doors Next
Linux
Ibm

12 Oct 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-12 14:15

Updated : 2025-10-16 14:32


NVD link : CVE-2025-2140

Mitre link : CVE-2025-2140

CVE.ORG link : CVE-2025-2140


JSON object : View

CWE
CWE-346

Origin Validation Error