IBM Engineering Lifecycle Optimization - Publishing

• CVE-2024-41763 Medium 5.9 IBM Engineering Lifecycle Optimization - Publishing information disclosure 0.2%
• CVE-2024-41766 High 7.5 IBM Engineering Lifecycle Optimization - Publishing denial of service 0.5%
• CVE-2024-41765 Medium 6.5 IBM Engineering Lifecycle Optimization - Publishing directory traversal 0.6%
• CVE-2024-41767 High 7.3 IBM Engineering Lifecycle Optimization - Publishing SQL injection 0.3%
• CVE-2024-41768 Medium 6.5 IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception 0.4%
• CVE-2023-45188 Medium 6.5 IBM Engineering Lifecycle Optimization Publishing file upload 0.7%
• CVE-2023-45191 High 7.5 IBM Engineering Lifecycle Optimization information disclosure 0.7%
• CVE-2023-45190 Medium 5.1 IBM Engineering Lifecycle Optimization HTTP header injection 0.3%
• CVE-2023-45187 Medium 6.3 IBM Engineering Lifecycle Optimization - Publishing session fixation 0.4%
• CVE-2021-39028 Medium 5.4 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could 0.5%
• CVE-2021-39019 Medium 6.5 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user. IBM X-Force 0.8%
• CVE-2021-39018 Medium 4.3 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the syst 0.7%
• CVE-2021-39017 Medium 5.7 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 2 0.9%
• CVE-2021-39016 Medium 4.3 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the so 0.6%
• CVE-2021-39015 Medium 5.4 IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a 0.5%