Description IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.
A denial-of-service vulnerability has been identified in IBM Engineering Lifecycle Management DOORS versions 7.0.3 (Interim Fix 001 through Interim Fix 021), 7.1.0 (Interim Fix 001 through Interim Fix 009), and 7.2.0 and 7.2.0 Interim Fix 001. The issue arises from improper handling of XML entity expansion, which could allow a remote attacker to cause a denial-of-service condition.
Users are advised to upgrade to IBM Engineering Lifecycle Management DOORS version 7.0.3 (iFix022), 7.1.0 (iFix010), or 7.2.0 (iFix002).
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 20, 2026 Exploitation: NoneAutomatable: YesTechnical Impact: Partial
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') [email protected]
Affected Products Product Versions ibm engineering lifecycle management 7.0.3 -
7.0.3 ifix001
7.0.3 ifix002
7.0.3 ifix003
7.0.3 ifix004
7.0.3 ifix005
7.0.3 ifix006
7.0.3 ifix007
7.0.3 ifix008
7.0.3 ifix009
7.0.3 ifix010
7.0.3 ifix011
7.0.3 ifix012
7.0.3 ifix013
7.0.3 ifix014
7.0.3 ifix015
7.0.3 ifix016
7.0.3 ifix017
7.0.3 ifix018
7.0.3 ifix018_security_fix
7.0.3 ifix019
7.0.3 ifix020
7.0.3 ifix021
7.1.0 -
7.1.0 ifix001
7.1.0 ifix0010
7.1.0 ifix002
7.1.0 ifix003
7.1.0 ifix004
7.1.0 ifix004_security_fix
7.1.0 ifix005
7.1.0 ifix006
7.1.0 ifix007
7.1.0 ifix008
7.1.0 ifix009
7.2.0 -
7.2.0 ifix001
Viewing 5 of 37 versions. View all CPE cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:-:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix001:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix002:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix003:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix004:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix005:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix006:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix007:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix008:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix009:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix010:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix011:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix012:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix013:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix014:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix015:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix016:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix017:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix018:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix018_security_fix:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix019:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix020:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:ifix021:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix001:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix0010:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix002:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix003:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix004:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix004_security_fix:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix005:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix006:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix007:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix008:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:ifix009:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.2.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_management:7.2.0:ifix001:*:*:*:*:*:* Remediation No remediation found in references.
Change History 4 change records found show changes