CVE-2025-0152

6.1 Moyenne

Publiée le 30/07/2026 à 21:16 · Modifiée le 29/09/2026 à 21:10 · Analysée par le NVD · Source : psirt@us.ibm.com

Description

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Traduire en français

Produits concernés

IBM Engineering Requirements Management DOORS and DOORS Web Access
Ibm engineering requirements management doors web access

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	psirt@us.ibm.com (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://www.ibm.com/support/pages/node/7279145 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories