IBM Rational Doors Web Access vulnerabilities

5 CVEs affecting IBM Rational Doors Web Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1975, published 2019-05-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-2681, published 2011-07-07. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.
CVE-2011-2680, published 2011-07-07. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."
CVE-2011-2679, published 2011-07-07. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2682, published 2011-07-07. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access…
CVE-2018-1975, published 2019-05-16. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…