VYPR
← All advisories
Medium severity5.7NVD Advisory· Published Oct 12, 2025· Updated Jun 17, 2026

CVE-2025-2140

CVE-2025-2140

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Engineering Requirements Management Doors Nextllm-fuzzy4 versions
    7.0.2, 7.0.3, and 7.1+ 3 more
    • (no CPE)range: 7.0.2, 7.0.3, and 7.1
    • cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.