IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335.
| Software | From | Fixed in |
|---|---|---|
| ibm / engineering_requirements_management_doors | 9.7.2.8 | 9.7.2.8.x |
| ibm / engineering_requirements_management_doors_web_access | 9.7.2.8 | 9.7.2.8.x |