Engineering Lifecycle Optimization Publishing
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0.3:*:*:*:*:*:*:*
part: a version: 7.0.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Engineering Lifecycle Optimization Publishing (03630928-0b7d-5dd4-9bde-c2366e4b2e6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52890 |
vulnerable | 2026-06-08 06:52:16.344818 |
IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
MEDIUM (6.1)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs.
Published: 2025-08-05T13:45:59.104Z
Updated: 2025-08-05T14:02:25.726Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41768 |
vulnerable | 2026-06-08 06:43:55.144821 |
IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.
Published: 2025-01-04T14:26:32.766Z
Updated: 2025-01-06T16:02:57.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41767 |
vulnerable | 2026-06-08 06:43:55.144168 |
IBM Engineering Lifecycle Optimization - Publishing SQL injection
HIGH (7.3)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2025-01-04T14:27:46.134Z
Updated: 2025-01-06T16:02:32.596Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41766 |
vulnerable | 2026-06-08 06:43:55.143539 |
IBM Engineering Lifecycle Optimization - Publishing denial of service
HIGH (7.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.
Published: 2025-01-04T14:37:08.203Z
Updated: 2025-01-06T16:01:20.543Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41765 |
vulnerable | 2026-06-08 06:43:55.142735 |
IBM Engineering Lifecycle Optimization - Publishing directory traversal
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2025-01-04T14:36:13.416Z
Updated: 2025-01-06T16:01:44.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41763 |
vulnerable | 2026-06-08 06:43:55.140407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45188 |
vulnerable | 2026-06-08 06:12:42.144922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.