CVE-2025-13734

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-862 CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-137357.4Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with pro CVE-2025-137363.7When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the s CVE-2025-137374.3The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,CVE-2025-137386.4The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ez-toc` shortcode in all vers CVE-2025-137396.4The CryptX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `cryptx` shortcode in all versions up to, and CVE-2025-13747.5A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown p CVE-2025-137406.4The Lightweight Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `lightweight-accordion` shortco CVE-2025-137414.3The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulne CVE-2025-137426.1Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template CVE-2025-137437.5Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk CVE-2025-137445.4An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacke CVE-2025-137466.4The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User's Display Name in all