IBM Engineering Lifecycle Optimization Publishing 7.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:-:*:*:*:*:*:*
part: a version: 7.0.3 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Engineering Lifecycle Optimization Publishing (c547bb13-6d51-53d5-aa4f-387f6fa98f45) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41768 |
vulnerable | 2026-06-08 06:43:55.144974 |
IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.
Published: 2025-01-04T14:26:32.766Z
Updated: 2025-01-06T16:02:57.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41767 |
vulnerable | 2026-06-08 06:43:55.144216 |
IBM Engineering Lifecycle Optimization - Publishing SQL injection
HIGH (7.3)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2025-01-04T14:27:46.134Z
Updated: 2025-01-06T16:02:32.596Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41766 |
vulnerable | 2026-06-08 06:43:55.143681 |
IBM Engineering Lifecycle Optimization - Publishing denial of service
HIGH (7.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.
Published: 2025-01-04T14:37:08.203Z
Updated: 2025-01-06T16:01:20.543Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41765 |
vulnerable | 2026-06-08 06:43:55.142991 |
IBM Engineering Lifecycle Optimization - Publishing directory traversal
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2025-01-04T14:36:13.416Z
Updated: 2025-01-06T16:01:44.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41763 |
vulnerable | 2026-06-08 06:43:55.142098 |
IBM Engineering Lifecycle Optimization - Publishing information disclosure
MEDIUM (5.9)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2025-01-04T14:38:06.836Z
Updated: 2025-01-06T14:26:06.253Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.