CVE-2025-1826
Estado: AnalizadaMedia (5.4)—
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 5.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.18%
- Percentil entre todas las CVEs puntuadas: 7
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-1826",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-1826",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-10-07T18:13:04.012312Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.4,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.3
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix034:*:*:*:*:*:*",
"cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix016:*:*:*:*:*:*",
"cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix004:*:*:*:*:*:*"
],
"vendor": "IBM",
"product": "Jazz Foundation",
"versions": [
{
"status": "affected",
"version": "7.0.2",
"versionType": "semver",
"lessThanOrEqual": "7.0.2 iFix034"
},
{
"status": "affected",
"version": "7.0.3",
"versionType": "semver",
"lessThanOrEqual": "7.0.3 iFix016"
},
{
"status": "affected",
"version": "7.1.0",
"versionType": "semver",
"lessThanOrEqual": "7.1.0 iFix004"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-10-07T18:15:58.683",
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7247292",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
}
],
"lastModified": "2026-06-17T08:39:50.810",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "441ECFF5-7336-4638-8E9A-FDCB25B64455"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5732ED04-5F96-4599-93E6-7584885D2B93"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95526B74-096B-4B77-9335-753403C8FD4D"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "261024C4-6F61-412E-8AD1-735E691BF47C"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F6D0FB-E128-478F-B8AA-D19E9C4B48C3"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5369A9EE-5DA1-4FDC-8D61-7B34AC7CA2E1"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A8996A8-891F-45F3-8950-4D3CDC31FBF4"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C3158CF-3B4D-424E-9D71-32949A46ADD6"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix008a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC5C310D-EF92-4B9F-BAB7-1E768336AAF1"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix009:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08DAB6ED-24E3-4041-8230-1D2C15904FD1"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "782AB41B-3C55-4701-8F6B-2CDA70A9D66B"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix011:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5CAE940-F815-472B-AFA7-9E25D04BC519"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix012:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E853B8B5-735D-4873-9377-CFBBC61C6196"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix013:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2690EEF9-0D5F-4C30-823E-9ABE703007E3"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix014:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "193C0380-AD9F-4823-81D8-AB2B95E0C200"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix016:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5ABD29B-3AF6-4760-A3CA-356CD933370A"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix017:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0A30F1F-59AA-485F-853B-B8DF430C2787"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix018:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFEAFE85-375D-47DD-8D29-BB8AC17EC557"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix020a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "899CFB7F-21AD-47AF-8494-3D3E0E243130"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix021:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563E2A40-CB7C-456C-9915-2F5D01FF37AE"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix022:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91379E62-5D52-4E70-BB55-5CD44D441808"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix023:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E60A806-F8F5-464C-95CD-75F5D7EB9065"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix024:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FF16BF8-714D-4FB0-88BA-CF0D6B5B355E"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix025:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EBC2E3B-028B-4822-B5C9-B876C99E82C5"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix026a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "869E2253-1EF8-482E-A1DF-09194B45990B"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix027:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41059E5C-FE0B-46FA-9F67-6223F72CA5EF"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix028:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "453C5894-0B5B-4AB1-BDDC-005201B94165"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix029:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D296DAF-F407-44C7-910B-53BA9E7E0FCF"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix030:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A4AF381-C5A8-44CA-BD5F-B7167BCBEE0E"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix031:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BB65C18-7859-4CBC-BA99-FE50971031FD"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix032:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C3A76AB-C70B-49F7-B73C-1A73F2497A08"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix033:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B707842F-4CED-4D84-B812-75B2DB818C0A"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix034:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0702FAA2-762A-4A95-A73A-59AB2DA1DBA2"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7BEB914-06D8-4F0B-89C8-DFFF89B432F4"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF01D2AF-8FCB-49FB-BD5F-17877F7731F9"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B766EDB8-4115-4682-B1AD-57C99107A195"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AB07BE6-C24B-4D7A-B906-2268BAF742CB"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C405EE5A-4320-4960-B430-00AFCF540089"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE6616C0-F434-4189-AF6E-07AB0E04626F"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "854B0828-F782-4F8E-9970-AA7BF2A4F0F5"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76F5529B-09C3-4B3D-B670-978EDE39F086"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix008:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2FD2D5C-2BF9-4558-B794-A2CEC3E13E3E"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix009:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71F966A3-4D5A-4870-91A0-F7BE6AEECDFE"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32BB09AF-ED78-4FFB-8313-AC527250CE6C"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix011:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01E9BCE0-684F-4624-BD4C-2A90E160C63D"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix012:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62031B5D-C2BE-433B-89D4-9CEB013E0402"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix013:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86F6DF11-AC1B-4B9C-89B0-C5930775AC95"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix014:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AA16E96-2467-4542-991A-C38906494A7F"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix015:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F7B38A2-AB25-4FFB-BC2F-6D29BCD57C65"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix016:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6249D2A-8564-415F-BF39-887C6B1D3679"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.1.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53EA48FB-EA3A-4111-AAAF-F7053DBEEEA3"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD93D68-30C9-4E29-8295-AC0121F2EFF3"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "979A3BCA-1EDD-4020-918B-BBEBB6F7EFF0"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A32F602D-AE6E-4120-9E24-BD18989FB80C"
},
{
"criteria": "cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D3BC640-5946-4349-8E62-6C2D4AF03ADC"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}