Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Lifecycle Optimization Publishing (03630928-0b7d-5dd4-9bde-c2366e4b2e6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29670 vulnerable 2026-06-08 05:31:26.750180 Details available
MEDIUM (5.4)
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199408.
Published: 2021-06-02T20:40:45.538Z
Updated: 2024-09-16T20:36:39.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29668 vulnerable 2026-06-08 05:31:26.727375 Details available
MEDIUM (5.4)
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199406.
Published: 2021-06-02T20:40:44.845Z
Updated: 2024-09-17T02:42:44.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20371 vulnerable 2026-06-08 05:29:09.169773 Details available
MEDIUM (4.3)
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.
Published: 2021-06-02T20:40:44.116Z
Updated: 2024-09-16T23:06:28.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20348 vulnerable 2026-06-08 05:29:09.099836 Details available
MEDIUM (5.4)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.
Published: 2021-06-02T20:40:43.390Z
Updated: 2024-09-16T20:43:23.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20347 vulnerable 2026-06-08 05:29:09.098562 Details available
MEDIUM (5.4)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.
Published: 2021-06-02T20:40:42.715Z
Updated: 2024-09-16T22:36:24.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20346 vulnerable 2026-06-08 05:29:09.097329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20345 vulnerable 2026-06-08 05:29:09.095998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20343 vulnerable 2026-06-08 05:29:09.094696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20338 vulnerable 2026-06-08 05:29:09.052149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5030 vulnerable 2026-06-08 05:26:41.390296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4977 vulnerable 2026-06-08 05:26:41.306764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4732 vulnerable 2026-06-08 05:26:40.837783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4495 vulnerable 2026-06-08 05:25:59.420182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.