Known vulnerabilities in IBM Engineering Lifecycle Optimization - Publishing

Software CPE: cpe:2.3:a:ibm_corporation:ibm_engineering_lifecycle_optimization_-_publishing:*:*:*:*:*:*:*:*
Total vulnerabilities: 61
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Engineering Lifecycle Optimization - Publishing IBM Engineering Lifecycle Optimization - Publishing is affected by 61 known vulnerabilities: 1 critical, 6 high, 37 medium, 17 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383
CWE-362 Medium
No
No
7.0.3.22, 7.1.0.9, 7.2.0.2 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864
CWE-674 Medium
No
No
7.0.2.36, 7.0.3.19, 7.1.0.5 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU113666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52890
CWE-79 Medium
No
No
7.0.2.35, 7.0.3.16 06.08.2025 SB2025080615
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
7.0.2.36, 7.0.3.19, 7.1.0.5 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
7.0.2.36, 7.0.3.17, 7.1.0.5 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU102037 - Information Exposure Through an Error Message
CVE-2024-39725
CWE-209 Medium
No
No
7.0.2.32, 7.0.3.10 30.12.2024 SB2024123062
SB2025010612
SB2025030417
#VU102028 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2024-39727
CWE-1022 Medium
No
No
7.0.2.32, 7.0.3.10 30.12.2024 SB2024123053
SB2025010614
SB2025022616
and 1 more
#VU98418 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-41779
CWE-362 High
No
No
7.0.2.31, 7.0.3.08, 7.0.2.32, 7.0.3.10 11.10.2024 SB2024101146
SB2025012413
#VU98025 - Resource exhaustion
CVE-2024-47554
CWE-400 Medium
No
No
7.0.2.32, 7.0.3.10 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU94699 - Unrestricted Upload of File with Dangerous Type
CVE-2023-45188
CWE-434 Low
No
No
7.0.2.29, 7.0.3.03 24.07.2024 SB2024072412
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
7.0.2.35, 7.0.3.16 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337
CWE-90 High
No
No
7.0.2.32, 7.0.3.10 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU80741 - Improper Certificate Validation
CVE-2012-5783
CWE-295 Medium
No
No
7.0.2.36, 7.0.3.18, 7.1.0.5 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU77628 - Improper input validation
CVE-2012-6153
CWE-20 Medium
No
No
7.0.2.36, 7.0.3.18, 7.1.0.5 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU70531 - Deserialization of Untrusted Data
CVE-2022-36944
CWE-502 High
Available
No
7.0.2.35, 7.0.3.16, 7.1.4 SR1 28.12.2022 SB2022122829
SB2022122924
SB2023021531
and 15 more


Showing elements 1 - 20 out of 61