Engineering Lifecycle Optimization Publishing (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2025-01-04. Vendor: Ibm.
CVEs of Engineering Lifecycle Optimization Publishing
- CVE-2024-41768 - CVSS 6.5 (medium), 2025-01-04: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the…
- CVE-2024-41766 - CVSS 7.5 (high), 2025-01-04: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular…
- CVE-2024-41765 - CVSS 6.5 (medium), 2025-01-04: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could…
- CVE-2024-41763 - CVSS 7.5 (high), 2025-01-04: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
- CVE-2024-41767 - CVSS 7.3 (high), 2025-01-04: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL…
- CVE-2023-45188 - CVSS 9.8 (critical), 2024-06-09: IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of…
- CVE-2021-39018 - CVSS 4.3 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that…
- CVE-2021-39017 - CVSS 6.5 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by…
- CVE-2021-39028 - CVSS 5.4 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper…
- CVE-2021-39016 - CVSS 4.3 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic…
- CVE-2021-39019 - CVSS 6.5 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET…
- CVE-2021-39015 - CVSS 5.4 (medium), 2022-07-14: IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
