CVE-2025-2140: IBM Engineering Requirements Management Doors Next

Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

Affected products

• IBM Engineering Requirements Management Doors Next: version 7.0.2 only; version 7.0.3 only; version 7.1 only

Published 2025-10-12. Last modified 2026-10-08.