CVE-2025-2140

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
References
Link Resource
https://www.ibm.com/support/pages/node/7247716 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Oct 2025, 14:32

Type Values Removed Values Added
First Time Linux linux Kernel
Microsoft windows
Ibm aix
Ibm engineering Requirements Management Doors Next
Ibm
Linux
Microsoft
References () https://www.ibm.com/support/pages/node/7247716 - () https://www.ibm.com/support/pages/node/7247716 - Vendor Advisory
CPE cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*

12 Oct 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-12 14:15

Updated : 2025-10-16 14:32


NVD link : CVE-2025-2140

Mitre link : CVE-2025-2140

CVE.ORG link : CVE-2025-2140


JSON object : View

Products Affected

linux

  • linux_kernel

microsoft

  • windows

ibm

  • aix
  • engineering_requirements_management_doors_next
CWE
CWE-346

Origin Validation Error