Known vulnerabilities in Engineering Lifecycle Management

Vendor: IBM Corporation
Software: Engineering Lifecycle Management
Software CPE: cpe:2.3:a:ibm_corporation:engineering_lifecycle_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 60
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Engineering Lifecycle Management Engineering Lifecycle Management is affected by 60 known vulnerabilities: 1 critical, 1 high, 29 medium, 29 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124831 - Weak Password Requirements
CVE-2025-14917		 CWE-521 Low
No
No
 - 02.04.2026 SB2026040252
SB2026040327
SB2026040328
and 18 more
#VU119960 - Server-Side Request Forgery (SSRF)
CVE-2025-13281		 CWE-918 Medium
No
No
 1.3.0 15.12.2025 SB2025121522
SB2025121530
SB2025121531
and 5 more
#VU119115 - Out-of-bounds read
CVE-2025-66293		 CWE-125 Medium
No
No
 1.3.0 03.12.2025 SB2025120348
SB20251210187
SB2025121761
and 41 more
#VU118778 - Out-of-bounds read
CVE-2025-64720		 CWE-125 Medium
No
No
 1.3.0 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018		 CWE-122 Critical
Available
No
 1.3.0 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more
#VU118191 - Resource exhaustion
CVE-2025-61724		 CWE-400 Medium
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110731
SB2025111491
and 20 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118188 - Allocation of Resources Without Limits or Throttling
CVE-2025-58186		 CWE-770 Medium
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 19 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 112 more
#VU118186 - Improper input validation
CVE-2025-47912		 CWE-20 Low
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 21 more
#VU118184 - Resource exhaustion
CVE-2025-61723		 CWE-400 Medium
No
No
 1.3.0 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 118 more
#VU118176 - Resource exhaustion
CVE-2025-64329		 CWE-400 Low
No
No
 1.3.0 07.11.2025 SB2025110610
SB2025111276
SB2025112826
and 12 more
#VU118141 - Incorrect Default Permissions
CVE-2024-25621		 CWE-276 Low
No
No
 1.3.0 06.11.2025 SB2025110610
SB2025111276
SB2025112826
and 17 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 1.3.0 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU115217 - Incorrect Authorization
CVE-2025-5187		 CWE-863 Low
No
No
 1.3.0 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU114079 - Improper input validation
CVE-2025-47906		 CWE-20 Low
No
No
 1.3.0 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 130 more
#VU111971 - Improper Authorization
CVE-2025-4563		 CWE-285 Low
No
No
 1.3.0 26.06.2025 SB2025062632
SB2025062645
SB2025062646
and 7 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 1.3.0 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU93459 - Use After Free
CVE-2023-42364		 CWE-416 Low
No
No
 1.3.0 27.06.2024 SB2024062758
SB2024062811
SB2024081535
and 14 more
#VU93458 - Use After Free
CVE-2023-42365		 CWE-416 Low
No
No
 1.3.0 27.06.2024 SB2024062758
SB2024062811
SB2024081535
and 14 more


Showing elements 1 - 20 out of 60