CVE-2025-2140

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7247716	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:::::::*
	cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:::::::*
	cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:::::::*

OR	cpe:2.3:o:ibm:aix:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

08 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3 y 7.1 podría permitir a un usuario autenticado en la red suplantar la identidad de correo electrónico del remitente debido a una verificación inadecuada de los datos de origen.

Information

Published : 2025-10-12 14:15

Updated : 2026-10-08 13:10

NVD link : CVE-2025-2140

Mitre link : CVE-2025-2140

CVE.ORG link : CVE-2025-2140

JSON object : View

Products Affected

linux

linux_kernel

microsoft

windows

ibm

aix
engineering_requirements_management_doors_next

CWE

CWE-346

Origin Validation Error

{"id": "CVE-2025-2140", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-2140", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T14:48:48.146508Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Engineering Requirements Management Doors Next", "versions": [{"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.1"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-12T14:15:36.373", "references": [{"url": "https://www.ibm.com/support/pages/node/7247716", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-346"}]}], "descriptions": [{"lang": "en", "value": "IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data."}, {"lang": "es", "value": "IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3 y 7.1 podr\u00eda permitir a un usuario autenticado en la red suplantar la identidad de correo electr\u00f3nico del remitente debido a una verificaci\u00f3n inadecuada de los datos de origen."}], "lastModified": "2026-10-08T13:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6702EFCC-2FC7-48F3-9356-40033D147332"}, {"criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0634040A-046B-4F1D-AD33-7095D68429C5"}, {"criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E44B30C9-5962-4994-A810-B0E04561EDD3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}