Ibm Engineering Lifecycle Optimization Publishing — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Engineering Lifecycle Optimization Publishing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2024-41766 — CVSS 7.5 (high): IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a…
• CVE-2024-41767 — CVSS 7.3 (high): IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially…
• CVE-2021-39019 — CVSS 6.5 (medium): IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information…
• CVE-2024-41768 — CVSS 6.5 (medium): IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which…
• CVE-2021-39017 — CVSS 6.5 (medium): IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary…
• CVE-2023-45188 — CVSS 6.5 (medium): IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the…
• CVE-2024-41765 — CVSS 6.5 (medium): IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An…
• CVE-2024-41763 — CVSS 5.9 (medium): IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an…
• CVE-2021-39015 — CVSS 5.4 (medium): IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows…
• CVE-2021-39028 — CVSS 5.4 (medium): IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by…
• CVE-2021-39018 — CVSS 4.3 (medium): IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL…
• CVE-2021-39016 — CVSS 4.3 (medium): IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control…