CVE-2024-41768
Published Jan 4, 2025IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpe…
Vendor/product archive
ibm / engineering_lifecycle_optimization_publishing CVEs
Beta · best-effort12 CVEs tagged to ibm / engineering_lifecycle_optimization_publishing — 0 Critical, 2 High, 10 Medium, 0 Low, 0 Unrated.
CVE-2024-41767
Published Jan 4, 2025IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allo…
CVE-2024-41766
Published Jan 4, 2025IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.
CVE-2024-41765
Published Jan 4, 2025IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted…
CVE-2024-41763
Published Jan 4, 2025IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive in…
CVE-2023-45188
Published Jun 9, 2024IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By…
CVE-2021-39028
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOS…
CVE-2021-39019
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticat…
CVE-2021-39018
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further att…
CVE-2021-39017
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access contro…
CVE-2021-39016
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an a…
CVE-2021-39015
Published Jul 14, 2022IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
Showing 1-12 of 12 CVEsPage 1 of 1