Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Lifecycle Optimization Publishing (03630928-0b7d-5dd4-9bde-c2366e4b2e6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52890 vulnerable 2026-06-08 06:52:16.343676 IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
MEDIUM (6.1)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs.
Published: 2025-08-05T13:45:59.104Z
Updated: 2025-08-05T14:02:25.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41768 vulnerable 2026-06-08 06:43:55.144788 IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.
Published: 2025-01-04T14:26:32.766Z
Updated: 2025-01-06T16:02:57.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41767 vulnerable 2026-06-08 06:43:55.144126 IBM Engineering Lifecycle Optimization - Publishing SQL injection
HIGH (7.3)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2025-01-04T14:27:46.134Z
Updated: 2025-01-06T16:02:32.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41766 vulnerable 2026-06-08 06:43:55.143367 IBM Engineering Lifecycle Optimization - Publishing denial of service
HIGH (7.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.
Published: 2025-01-04T14:37:08.203Z
Updated: 2025-01-06T16:01:20.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41765 vulnerable 2026-06-08 06:43:55.142691 IBM Engineering Lifecycle Optimization - Publishing directory traversal
MEDIUM (6.5)
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2025-01-04T14:36:13.416Z
Updated: 2025-01-06T16:01:44.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41763 vulnerable 2026-06-08 06:43:55.138943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45188 vulnerable 2026-06-08 06:12:42.143836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29670 vulnerable 2026-06-08 05:31:26.750340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29668 vulnerable 2026-06-08 05:31:26.728363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20371 vulnerable 2026-06-08 05:29:09.169888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20348 vulnerable 2026-06-08 05:29:09.099869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20347 vulnerable 2026-06-08 05:29:09.098593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20346 vulnerable 2026-06-08 05:29:09.097362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20345 vulnerable 2026-06-08 05:29:09.096125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20343 vulnerable 2026-06-08 05:29:09.094729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20338 vulnerable 2026-06-08 05:29:09.053110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5030 vulnerable 2026-06-08 05:26:41.390409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4977 vulnerable 2026-06-08 05:26:41.306902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4732 vulnerable 2026-06-08 05:26:40.838899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4495 vulnerable 2026-06-08 05:25:59.421147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.