CVE-2025-33096

Medium CVSS: 6.5

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.

Vendor

Ibm

Product

Engineering Requirements Management Doors Next

CWE

CWE-674

Yayın Tarihi

2025-10-12 14:15:36

Güncelleme

2025-10-16 14:37:47

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-674 Engineering Requirements Management Doors Next MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7247716

Benzer Kayıtlar

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…

Medium

CVE-2025-66483

IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authentic…

Medium

CVE-2025-36375

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and I…