CVE-2025-2140 — Origin Validation Error in IBM Engineering Requirements Management Doors Next

CWE-346 — Origin Validation Error3 documents3 sources
Severity
5.7MEDIUMNVD
EPSS
0.0%
top 99.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Engineering Requirements Management Doors Next
Timeline
PublishedOct 12

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.1 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-46pv-6cvv-xrm2: IBM Engineering Requirements Management Doors Next 7↗2025-10-12
▶
CVEList
IBM Engineering Requirements Management Doors Next spoofing↗2025-10-12
▶
CVE-2025-2140 — Origin Validation Error in IBM | cvebase