CVE-2025-2140

MediumCVSS 5.7/10Last modified Oct 8, 2026

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-346

Affected software

Vendor	Product	Versions
IBM	Engineering Requirements Management Doors Next	7.0.2; 7.0.3; 7.1

References

https://www.ibm.com/support/pages/node/7247716Vendor Advisory

Timeline

Published: Oct 12, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214008.0Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2025-214014.5Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2025-214027.8Microsoft Office OneNote Remote Code Execution Vulnerability CVE-2025-214036.4On-Premises Data Gateway Information Disclosure Vulnerability CVE-2025-214044.3Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2025-214057.3Visual Studio Elevation of Privilege Vulnerability CVE-2025-214068.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-214078.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-214088.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2025-214098.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21416.1IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 CVE-2025-214108.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability