Engineering Lifecycle Optimization - Engineering Insights vulnerabilities

Product

Engineering Lifecycle Optimization - Engineering Insights

by Ibm · last CVE Dec 25, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 1High 2Medium 15Low 0

Severity

All severities18 Critical1 High2 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Engineering Lifecycle Optimization - Engineering Insights to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-39727	9.8	0%	Dec 25	IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing Affected: 7.0.2; 7.0.3
CVE-2020-4495	8.8	3%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control Affected: 7.0; 7.0.1; 7.0.2
CVE-2024-39726	8.2	1%	Nov 15	IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.0.2; 7.0.3
CVE-2021-20371	6.5	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-4732	6.5	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-4974	6.3	1%	Jul 28	IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-5004	5.4	0%	Jul 28	IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-29670	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-29668	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20348	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20347	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20346	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20345	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20343	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-20338	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-5030	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-4977	5.4	0%	Jun 2	IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2024-39725	5.3	0%	Dec 25	IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure Affected: 7.0.2; 7.0.3