CVE-2025-2138: IBM Engineering Requirements Management Doors Next

Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.

Affected products

• IBM Engineering Requirements Management Doors Next: version 7.0.2 only; version 7.0.3 only; version 7.1 only

Published 2025-10-12. Last modified 2026-10-08.