Skip to content
OpenAdvisories

Product · IBM

Engineering Requirements Management

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-28949

    IBM Engineering Requirements Management cross-site request forgery

    IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216.

    IBM Engineering Requirements Management
  • Medium 5.1
    CVE-2023-50305

    IBM Engineering Requirements Management information disclosure

    IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336.

    IBM Engineering Requirements Management
  • Medium 4.8
    CVE-2023-28525

    IBM Engineering Requirements Management cross-site scripting

    IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with…

    IBM Engineering Requirements Management