ibm engineering requirements management doors next

Name: ibm engineering requirements management doors next
Brand: ibm

productUS

cpe:2.3:a:ibm:engineering_requirements_management_doors_next:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high13medium1low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-4547US	medium5.4	0.83% (57th)	—	no fix	2021-01-27	4 versions
CVE-2020-4965US	high7.5OT elevated	0.72% (54th)	—	no fix	2021-04-12	3 versions
CVE-2021-20357US	medium5.4	0.67% (52nd)	—	no fix	2021-01-27	4 versions
CVE-2020-4865US	medium5.4	0.67% (52nd)	—	no fix	2021-01-27	4 versions
CVE-2020-4855US	medium5.4	0.67% (52nd)	—	no fix	2021-01-27	4 versions
CVE-2020-4524US	medium5.4	0.67% (52nd)	—	no fix	2021-01-27	4 versions
CVE-2020-4964US	medium4.3	0.64% (50th)	—	no fix	2021-04-12	3 versions
CVE-2021-20519US	medium5.4	0.62% (50th)	—	no fix	2021-04-12	3 versions
CVE-2020-4920US	medium5.4	0.62% (50th)	—	no fix	2021-04-12	3 versions
CVE-2020-4546US	medium5.4	0.56% (46th)	—	no fix	2020-09-02	= 7.0.1
CVE-2020-4522US	medium5.4	0.56% (46th)	—	no fix	2020-09-02	= 7.0.1
CVE-2020-4445US	medium5.4	0.56% (46th)	—	no fix	2020-09-02	= 7.0.1
CVE-2020-4542US	medium5.4	0.56% (46th)	—	no fix	2020-08-04	= 7.0
CVE-2024-41771US	—	0.48% (41st)	—	no fix	2025-03-03	3 versions
CVE-2024-41770US	—	0.48% (41st)	—	no fix	2025-03-03	3 versions
CVE-2025-33096US	—	0.31% (23rd)	—	no fix	2025-10-12	3 versions
CVE-2024-43169US	medium6.5OT elevated	0.19% (9th)	—	no fix	2025-03-03	3 versions
CVE-2025-2138US	low3.5	0.18% (8th)	—	no fix	2025-10-12	3 versions
CVE-2025-2139US	—	0.18% (8th)	—	no fix	2025-10-12	3 versions
CVE-2025-13734US	—OT elevated	0.15% (4th)	—	no fix	2026-03-03	2 versions
CVE-2025-2140US	—	0.12% (2nd)	—	no fix	2025-10-12	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-602Client-Side Enforcement of Server-Side Security2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-346Origin Validation Error1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-494Download of Code Without Integrity Check1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.