CVE-2024-25039CWE-400denial-of-service

CVE-2024-25039

High · published July 30, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-07-30T23:16Z
Affected products (2)
ProductVersionsFixed in
ibm/engineering_requirements_management_doors_web_access≥ 9.6.1.1, ≤ 9.6.1.13—
ibm/engineering_requirements_management_doors_web_access≥ 9.7.2.1, ≤ 9.7.2.11—
References (1)
https://www.ibm.com/support/pages/node/7279145 · [email protected]
EPSS history
Timeline
  • 30 JUL 18:14Z
    IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities
    cvelistv5