IBM Engineering Lifecycle Optimization 7.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:engineering_lifecycle_optimization:7.0.3:*:*:*:*:*:*:*
part: a version: 7.0.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Engineering Lifecycle Optimization (8bff8a6b-2203-5761-9e3d-74ccecf9a3d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52890 |
vulnerable | 2026-06-08 06:52:16.346037 |
IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
MEDIUM (6.1)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs.
Published: 2025-08-05T13:45:59.104Z
Updated: 2025-08-05T14:02:25.726Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45191 |
vulnerable | 2026-06-08 06:12:42.150801 |
IBM Engineering Lifecycle Optimization information disclosure
HIGH (7.5)
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755.
Published: 2024-02-09T00:34:22.139Z
Updated: 2024-11-07T19:34:45.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45190 |
vulnerable | 2026-06-08 06:12:42.150200 |
IBM Engineering Lifecycle Optimization HTTP header injection
MEDIUM (5.1)
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 268754.
Published: 2024-02-09T00:32:06.397Z
Updated: 2025-06-03T18:55:51.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45187 |
vulnerable | 2026-06-08 06:12:42.142633 |
IBM Engineering Lifecycle Optimization - Publishing session fixation
MEDIUM (6.3)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749.
Published: 2024-02-09T00:29:52.422Z
Updated: 2024-08-02T20:14:19.844Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.