PT-2025-41722 · Ibm · Ibm Engineering Requirements Management Doors Next

Published 2025-10-12 · Updated 2025-10-16 · CVE-2025-2140

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1

Description An authenticated user on the network may be able to spoof the email identity of the sender due to improper verification of source data.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-2140

Affected Products

Ibm Engineering Requirements Management Doors Next

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-2140 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2140 · Vendor Advisory
• https://t.me/cveNotify/138949 · Telegram Post
• https://twitter.com/CVEnew/status/1977371316148703356 · Twitter Post
• https://ibm.com/support/pages/node/7247716 · Patch, Vendor Advisory
• https://t.me/CVEtracker/34713 · Telegram Post
• https://t.me/cveNotify/138384 · Telegram Post