CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-2138

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 2.1%

CVSS Severity

CVSS v3 Score 3.5

References

https://www.ibm.com/support/pages/node/7247716

Products affected by CVE-2025-2138

Ibm » Engineering Requirements Management Doors Next » Version: 7.0.2

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2
Ibm » Engineering Requirements Management Doors Next » Version: 7.0.3

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3
Ibm » Engineering Requirements Management Doors Next » Version: 7.1

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1
Ibm » Aix » Version: N/A

cpe:2.3:o:ibm:aix:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-2138

Products

Pricing

Contact Us