Engineering Lifecycle Optimization Publishing vulnerabilities
6 known vulnerabilities in Engineering Lifecycle Optimization Publishing from IBM. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Engineering Lifecycle Optimization Publishing: Improper Neutralization of Special Elements used in an SQL Command
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end databa
- 7.5 High severity
Engineering Lifecycle Optimization Publishing: Inefficient Regular Expression Complexity
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.
- 7.5 High severity
Engineering Lifecycle Optimization Publishing: Use of a Broken or Risky Cryptographic Algorithm
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- 9.8 Critical severity
Engineering Lifecycle Optimization Publishing: Unrestricted Upload of File with Dangerous Type
IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted request, a remote attacker could exploit this vulnera
- 7.5 High severity
Engineering Lifecycle Optimization - Publishing: Improper Restriction of Excessive Authentication Attempts
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755.
- 8.8 High severity
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate…
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749.