Engineering Lifecycle Optimization Engineering Insights

Vendor:

First CVE: Jun 2, 2021 · Active for 5 years

18

Total CVEs

More Total CVEs than 93% of tracked products

9.0

Avg CVEs / Year

Higher CVE frequency than 95% of tracked products

6.2

Avg CVSS

Higher Avg CVSS than 24% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Engineering Lifecycle Optimization Engineering Insights over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jun 2, 2021

5 years ago

Most Recent CVE

Dec 25, 2024

577 days ago

CVE Severity & Scoring

Engineering Lifecycle Optimization Engineering Insights18 CVEs

83%

11%

All CVEs352,294 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network18 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low18 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None12 (66.7%)

Unknown0 (0.0%)

Required6 (33.3%)

Privileges Required

Low15 (83.3%)

High0 (0.0%)

None3 (16.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (18 CVEs).

18 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2024-39727CRITICAL IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vu	Dec 25, 2024	9.8	27	NO	NO
CVE-2024-39726HIGH IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote atta	Nov 15, 2024	8.2	23	NO	NO
CVE-2020-4974MEDIUM IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potential	Jul 28, 2021	6.3	22	NO	NO
CVE-2021-20371MEDIUM IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information co	Jun 2, 2021	6.5	22	NO	NO
CVE-2020-4732MEDIUM IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.	Jun 2, 2021	6.5	22	NO	NO
CVE-2020-4495HIGH IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted re	Jun 2, 2021	8.8	22	NO	NO
CVE-2020-5004MEDIUM IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Jul 28, 2021	5.4	20	NO	NO
CVE-2021-20348MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO
CVE-2021-20347MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO
CVE-2021-20345MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO

View all 18 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (18 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (18 CVEs).

Media Mentions

Signals from CVEs in this product scope (18 CVEs).

Top CNAs Publishing CVEs For Engineering Lifecycle Optimization Engineering Insights

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
7.0.3	3	7.8	0.5%
7.0.2	18	6.2	0.7%
7.0.1	15	5.8	0.7%
7.0	15	5.8	0.7%