CVE-2017-1278: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection.

Security readout for executives and security teams

CVE-2017-1278 is an HTML injection issue in IBM Rational DOORS Next Generation. An attacker could place malicious HTML that runs in a victim’s browser when viewed. For business leaders, the concern is trust in requirements-management portals and possible misuse of authenticated user context. Exposure is most likely where affected IBM DOORS Next Generation versions remain deployed and users view attacker-controlled or untrusted content inside the application. Internet exposure is not stated in the sources. Treat this as a targeted remediation item for any remaining legacy IBM DOORS deployments. Priority rises if the system stores sensitive engineering requirements, supports many contributors, or is reachable by external users. Mitigation focus: Inventory IBM DOORS Next Generation / DNG / RRC deployments and versions.; Check IBM advisory guidance for fixed versions or vendor-supported remediation.; Prioritize upgrades for affected 4.0.x, 5.0.x, and 6.0.x systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.