CVE-2025-0152

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.6.1.1 through 9.6.1.13

Description An issue exists where an unauthenticated attacker can embed arbitrary JavaScript code into the Web UI. This cross-site scripting (XSS) flaw allows the attacker to alter the intended functionality of the application, which could potentially lead to the disclosure of credentials within a trusted session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.