IBM Engineering Lifecycle Optimization - Publishing
Moderate fix2 remedies
cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:*:*:*:*:*:*:*
Moderate fix2 remedies
- 7.0.3
- 7.0.2
IBM Engineering Lifecycle Optimization - Publishing SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in IBM Engineering Lifecycle Optimization - Publishing versions 7.0.2 and 7.0.3. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.
Impact
Exploitation of this vulnerability allows for unauthorized access to database information, with the potential to view, modify, or delete records.
Remediation
Users can upgrade to IBM Engineering Lifecycle Optimization - Publishing version 7.0.3 iFix010 or later, or version 7.0.2 iFix032 or later.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
1.4impact
5.0exploitability
7.0remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.