{"id":"CVE-2025-2140","aliases":["EUVD-2025-33896","GHSA-46pv-6cvv-xrm2"],"status":"published","title":"IBM Engineering Requirements Management Doors Next spoofing","description":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00127,"percentile":0.02423,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-346"],"published":"2025-10-12T13:33:22Z","modified":"2026-10-08T13:10:00Z","products":[{"vendor":"ibm","product":"engineering requirements management doors next"},{"vendor":"ibm","product":"engineering_requirements_management_doors_next"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7247716","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2140"},{"url":"https://github.com/advisories/GHSA-46pv-6cvv-xrm2"}],"sources":{"cve":[{"id":"CVE-2025-2140","title":"IBM Engineering Requirements Management Doors Next spoofing","description":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.","status":"published","published":"2025-10-12T13:33:22.545Z","modified":"2025-10-14T14:53:08.219Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:32:38.70481Z"}],"euvd":[{"id":"EUVD-2025-33896","description":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.","status":"published","published":"2025-10-12T13:33:22Z","modified":"2025-10-14T14:53:08Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:33.01309Z"}],"ghsa":[{"id":"GHSA-46pv-6cvv-xrm2","title":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an...","description":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.","status":"published","published":"2025-10-12T15:30:16Z","modified":"2025-10-12T15:30:23Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T15:03:56.92957Z"}],"nvd":[{"id":"CVE-2025-2140","description":"IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.","status":"published","published":"2025-10-12T14:15:36.373Z","modified":"2026-10-08T13:10:00.2Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:11:36.851295Z"}]}}