Engineering Lifecycle Optimization Publishing
Vendor:
First CVE: Aug 8, 2016 · Active for 9 years
34
Total CVEs
More Total CVEs than 96% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 16% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Engineering Lifecycle Optimization Publishing over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 8, 2016
9 years ago
Most Recent CVE
Jan 4, 2025
566 days ago
CVE Severity & Scoring
Engineering Lifecycle Optimization Publishing34 CVEs
85%
12%
All CVEs352,101 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (2.9%)
Network33 (97.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low34 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None20 (58.8%)
Unknown0 (0.0%)
Required14 (41.2%)
Privileges Required
Low27 (79.4%)
High1 (2.9%)
None6 (17.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (34 CVEs).
34 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-45188CRITICAL IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By | Jun 9, 2024 | 9.8 | 27 | NO | NO |
CVE-2017-1787MEDIUM IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM | Mar 2, 2018 | 6.7 | 23 | NO | NO |
CVE-2021-39019MEDIUM IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticate | Jul 14, 2022 | 6.5 | 22 | NO | NO |
CVE-2021-39017MEDIUM IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access control | Jul 14, 2022 | 6.5 | 22 | NO | NO |
CVE-2021-20371MEDIUM IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information co | Jun 2, 2021 | 6.5 | 22 | NO | NO |
CVE-2020-4732MEDIUM IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126. | Jun 2, 2021 | 6.5 | 22 | NO | NO |
CVE-2020-4495HIGH IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted re | Jun 2, 2021 | 8.8 | 22 | NO | NO |
CVE-2024-41767HIGH IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow | Jan 4, 2025 | 7.3 | 21 | NO | NO |
CVE-2024-41766HIGH IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression. | Jan 4, 2025 | 7.5 | 21 | NO | NO |
CVE-2024-41763HIGH IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inf | Jan 4, 2025 | 7.5 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (34 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (34 CVEs).
Media Mentions
Signals from CVEs in this product scope (34 CVEs).
Top CNAs Publishing CVEs For Engineering Lifecycle Optimization Publishing
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.0.3 | 6 | 7.5 | 0.4% | 0 | 0 |
| 7.0.2 | 25 | 6.1 | 0.6% | 0 | 0 |
| 7.0.1 | 19 | 5.7 | 0.7% | 0 | 0 |
| 7.0 | 20 | 5.7 | 0.7% | 0 | 0 |
| 6.0.6.1 | 8 | 5.3 | 0.7% | 0 | 0 |
| 6.0.6 | 12 | 5.3 | 0.7% | 0 | 0 |
| 6.0.5 | 5 | 5.7 | 0.7% | 0 | 0 |
| 2.1.2 | 3 | 5.8 | 0.8% | 0 | 0 |
| 2.0.1 | 2 | 5.4 | 0.9% | 0 | 0 |