CVE-2017-1560: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM DOORS Next Generation, also known as DNG/RRC, has a cross-site scripting flaw in listed 4.x, 5.x, and 6.x versions. A user could place JavaScript into the web interface, changing what another trusted session sees and potentially exposing credentials. No active exploitation is cited in the provided sources. Exposure is limited to organizations running affected IBM Rational DOORS Next Generation or DNG/RRC versions. Risk is higher where the application is internet-accessible, broadly available to project users, or used for sensitive engineering and requirements data. Treat this as a moderate priority for affected IBM engineering environments. It is not cited as actively exploited, but the possible credential exposure inside trusted sessions makes remediation important where DNG/RRC supports sensitive projects. Mitigation focus: Check IBM advisory swg22010321 for official fixes or upgrade direction.; Inventory all DNG/RRC deployments and versions against the affected list.; Prioritize remediation for internet-facing or partner-accessible instances..

Prepared

Jun 12, 2026, 19:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.