Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Lifecycle Optimization Publishing (03630928-0b7d-5dd4-9bde-c2366e4b2e6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45191 vulnerable 2026-06-08 06:12:42.150735 IBM Engineering Lifecycle Optimization information disclosure
HIGH (7.5)
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755.
Published: 2024-02-09T00:34:22.139Z
Updated: 2024-11-07T19:34:45.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45190 vulnerable 2026-06-08 06:12:42.149986 IBM Engineering Lifecycle Optimization HTTP header injection
MEDIUM (5.1)
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 268754.
Published: 2024-02-09T00:32:06.397Z
Updated: 2025-06-03T18:55:51.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45187 vulnerable 2026-06-08 06:12:42.140936 IBM Engineering Lifecycle Optimization - Publishing session fixation
MEDIUM (6.3)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749.
Published: 2024-02-09T00:29:52.422Z
Updated: 2024-08-02T20:14:19.844Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.