CVE-2025-33096

📊 6.5 MEDIUM0.0%🎯 0 exploits
📅 Published Oct 12, 2025
📋 Status: Analyzed

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion.

🎯 Affected Products & Systems

6 product configurations affected

Filter by type:
Version: 7.0.2
CPE:
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
Version: 7.0.3
CPE:
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.3:*:*:*:*:*:*:*
Version: 7.1
CPE:
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.1:*:*:*:*:*:*:*
💻
Operating System
Safe
Version: All versions
CPE:
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
💻
Operating System
Safe
Version: All versions
CPE:
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
💻
Operating System
Safe
Version: All versions
CPE:
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
6 productsscroll for more
Metrics
6.5 MEDIUMCVSS v3.1[email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector:
NETWORK
Complexity:
LOW
Privileges:
LOW
User Interaction:
NONE
Confidentiality:
NONE
Integrity:
NONE
Availability:
HIGH
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Analyzed
CVSS Details
6.5 (MEDIUM)v3.1
EPSS Details
0.0% (Minimal)14.1th percentile
Last updated: Oct 31, 2025
Exploitation probability within 30 days
Published Date
Oct 12, 2025 (20 days ago)
Last Modified
Oct 16, 2025 (16 days ago)
Security Weaknesses1
References2