EL
Product
Engineering Lifecycle Optimization Publishing
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 29Low 0
Watch
Add Engineering Lifecycle Optimization Publishing to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45188 | 9.8 | Jun 9 | IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions Affected: 7.0.2; 7.0.3 |
| CVE-2020-4495 | 8.8 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2024-41763 | 7.5 | Jan 4 | IBM Engineering Lifecycle Optimization - Publishing information disclosure Affected: 7.0.2, 7.0.3 |
| CVE-2024-41766 | 7.5 | Jan 4 | IBM Engineering Lifecycle Optimization - Publishing denial of service Affected: 7.0.2, 7.0.3 |
| CVE-2024-41767 | 7.3 | Jan 4 | IBM Engineering Lifecycle Optimization - Publishing SQL injection Affected: 7.0.2, 7.0.3 |
| CVE-2017-1787 | 6.7 | Mar 2 | IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials Affected: 2.1.2; 6.0.5 |
| CVE-2024-41765 | 6.5 | Jan 4 | IBM Engineering Lifecycle Optimization - Publishing directory traversal Affected: 7.0.2, 7.0.3 |
| CVE-2024-41768 | 6.5 | Jan 4 | IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception Affected: 7.0.2, 7.0.3 |
| CVE-2021-39019 | 6.5 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an… Affected: 6.0.6; 6.0.6.1; 7.0.1 |
| CVE-2021-39017 | 6.5 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access… Affected: 6.0.6; 6.0.6.1; 7.0.1 |
| CVE-2021-20371 | 6.5 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4732 | 6.5 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-39028 | 5.4 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the… Affected: 6.0.6; 6.0.6.1; 7.0.1 |
| CVE-2021-39015 | 5.4 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0.1 |
| CVE-2021-29670 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-29668 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20348 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20347 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20346 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20345 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20343 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20338 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-5030 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4977 | 5.4 | Jun 2 | IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2019-4431 | 5.4 | Feb 12 | IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2018-1951 | 5.4 | Jan 4 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting Affected: 2.1.2; 6.0.5; 6.0.6 |
| CVE-2018-1657 | 5.4 | Jan 4 | IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting Affected: 2.1.2; 6.0.5; 6.0.6 |
| CVE-2018-1534 | 5.4 | Oct 12 | IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting Affected: 6.0.5; 6.0.6 |
| CVE-2018-1533 | 5.4 | Oct 12 | IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting Affected: 6.0.5; 6.0.6 |
| CVE-2016-2914 | 5.4 | Aug 8 | Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute… Affected: 2.0.1 |
| CVE-2016-2912 | 5.4 | Aug 8 | Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject… Affected: 2.0.1 |
| CVE-2020-4316 | 4.7 | Jul 16 | IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies Affected: 6.0.6; 6.0.6.1; 7.0 |
| CVE-2021-39018 | 4.3 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further… Affected: 6.0.6; 6.0.6.1; 7.0.1 |
| CVE-2021-39016 | 4.3 | Jul 14 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an… Affected: 6.0.6; 6.0.6.1; 7.0.1 |
Showing 34