Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-0152 1 Ibm 2 Engineering Requirements Management Doors And Doors Web Access, Engineering Requirements Management Doors Web Access 2026-07-30 6.1 Medium
IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2024-25039 1 Ibm 1 Engineering Requirements Management Doors And Doors Web Access 2026-07-30 7.5 High
IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive.