Advisories · Technology
IBM Engineering Lifecycle Optimization - Publishing.
Every CVE that names IBM Engineering Lifecycle Optimization - Publishing among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
- IBM Engineering Lifecycle Optimization - Publishing
- CWE-84
- CVSS 5.9 Medium
IBM Engineering Lifecycle Optimization - Publishing information disclosure
- IBM Engineering Lifecycle Optimization Publishing
- Weak cryptography or TLS
- CVSS 7.5 High
IBM Engineering Lifecycle Optimization - Publishing denial of service
- IBM Engineering Lifecycle Optimization Publishing
- Denial of service
- CVSS 6.5 Medium
IBM Engineering Lifecycle Optimization - Publishing directory traversal
- IBM Engineering Lifecycle Optimization Publishing
- Path traversal
- CVSS 7.3 High
IBM Engineering Lifecycle Optimization - Publishing SQL injection
- IBM Engineering Lifecycle Optimization Publishing
- SQL injection
- CVSS 6.5 Medium
IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
- IBM Engineering Lifecycle Optimization Publishing
- CWE-544
- CVSS 6.5 Medium
IBM Engineering Lifecycle Optimization Publishing file upload
- IBM Engineering Lifecycle Optimization Publishing
- Unrestricted file upload
- CVSS 7.5 High
IBM Engineering Lifecycle Optimization information disclosure
- IBM Engineering Lifecycle Optimization - Publishing
- Authentication bypass
- CVSS 5.1 Medium
IBM Engineering Lifecycle Optimization HTTP header injection
- IBM Engineering Lifecycle Optimization - Publishing
- CWE-644
- CVSS 6.3 Medium
IBM Engineering Lifecycle Optimization - Publishing session fixation
- IBM Engineering Lifecycle Optimization - Publishing
- Authentication bypass
- CVSS 5.4 Medium
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
- IBM Engineering Lifecycle Optimization Publishing
- CVSS 6.5 Medium
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user.
- IBM Engineering Lifecycle Optimization Publishing
- CVSS 4.3 Medium
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the sys…
- IBM Engineering Lifecycle Optimization Publishing
- CVSS 5.7 Medium
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls.
- IBM Engineering Lifecycle Optimization Publishing
- CVSS 4.3 Medium
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the s…
- IBM Engineering Lifecycle Optimization Publishing
- CVSS 5.4 Medium
IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting.
- IBM Engineering Lifecycle Optimization Publishing