CVE-2025-1826

MEDIUM

IBM Engineering Requirements Management DOORS Next 7.0.2-7.1.0 - XSS

Title source: llm
STIX 2.1

Description

IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

References (1)

Core 1
Core References
Patch, Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7247292

Scores

CVSS v3 5.4
EPSS 0.0002
EPSS Percentile 5.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (2)
ibm/jazz_foundation 7.0.2 (33 CPE variants)
ibm/jazz_foundation 7.0.3 (17 CPE variants)
Published Oct 07, 2025
Tracked Since Feb 18, 2026