5.4
Moyenne
CVE-2021-39028 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header…
Description
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Engineering Lifecycle Optimization Publishing 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Engineering Lifecycle Optimization Publishing 6.0 | 6.0.6 → 6.0.6.1 | Pas de correctif indiqué |
Autres CVE de Engineering Lifecycle Optimization Publishing
Les 12 CVE de Engineering Lifecycle Optimization Publishing →
CVE-2024-41763
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic…
5.9
Moyenne
CVE-2024-41766
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial…
7.5
Élevée
CVE-2024-41765
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse…
6.5
Moyenne
CVE-2024-41767
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection
7.3
Élevée