Analysis Summary

CVE-2024-43190 CVSS:5.9

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.

CVE-2025-1351 CVSS:6.7

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function.

CVE-2025-36014 CVSS:8.2

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory.

Impact

• Gain Access
• Security Bypass
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2024-43190

• CVE-2025-1351

• CVE-2025-36014

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2024-43190

CVE-2025-1351

CVE-2025-36014