Ibm

Engineering Lifecycle Optimization Publishing

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2021-39019

  • EPSS 0.19%
  • Published 14.07.2022 17:15:08
  • Last modified 25.03.2025 14:21:02

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user. IBM X-Force ID: 213728.

5.4

CVE-2021-39028

  • EPSS 0.22%
  • Published 14.07.2022 17:15:08
  • Last modified 25.03.2025 14:21:02

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks agai...