IBM Doors Next 7.0.2-7.1 Email Spoof via Unverified Sender Source (CVE-2025-2140)
CVE-2025-2140 Published on October 12, 2025

IBM Engineering Requirements Management Doors Next spoofing
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

Origin Validation Error

The software does not properly verify that the source of data or communication is valid.


Products Associated with CVE-2025-2140

stack.watch emails you whenever new vulnerabilities are published in IBM Engineering Requirements Management Doors Next or IBM Doors Next. Just hit a watch button to start following.

IBM Engineering Requirements Management Doors Next
 
IBM Doors Next
 

Affected Versions

IBM Engineering Requirements Management Doors Next:

Exploit Probability

EPSS
0.01%
Percentile
3.19%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.