4.3
Medium
CVE-2021-39016 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently…
Description
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Lifecycle Optimization Publishing 7.0 | 7.0 → 7.0.2 | No fix stated |
| Engineering Lifecycle Optimization Publishing 6.0 | 6.0.6 → 6.0.6.1 | No fix stated |
Other CVEs of Engineering Lifecycle Optimization Publishing
The 12 CVEs of Engineering Lifecycle Optimization Publishing →
CVE-2024-41763
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic…
5.9
Medium
CVE-2024-41766
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial…
7.5
High
CVE-2024-41765
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse…
6.5
Medium
CVE-2024-41767
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection
7.3
High