← Back

Engineering Lifecycle Optimization Publishing

engineering_lifecycle_optimization_-_publishing

Vendor: Ibm • 28 CVEs

CVEs (28)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-4431
1Ibm
1Engineering Lifecycle Optimization Publishing
Jun 17, 2026
Feb 12, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...Show more
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888.Show less
CVE-2018-1951
1Ibm
1Engineering Lifecycle Optimization Publishing
Mar 25, 2025
Jan 4, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially l...Show more
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153494.Show less
CVE-2018-1657
1Ibm
1Engineering Lifecycle Optimization Publishing
Mar 25, 2025
Jan 4, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially l...Show more
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144883.Show less
CVE-2018-1534
1Ibm
1Engineering Lifecycle Optimization Publishing
Mar 25, 2025
Oct 12, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142432.Show less
CVE-2018-1533
1Ibm
1Engineering Lifecycle Optimization Publishing
Mar 25, 2025
Oct 12, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142431.Show less
CVE-2017-1787
1Ibm
1Engineering Lifecycle Optimization Publishing
Mar 25, 2025
Mar 2, 2018
N/A· v4
6.7 MEDIUM· v3
2.1 LOW· v2
IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.
CVE-2016-2914
1Ibm
1Engineering Lifecycle Optimization Publishing
May 6, 2026
Aug 8, 2016
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected fi...Show more
Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.Show less
CVE-2016-2912
1Ibm
1Engineering Lifecycle Optimization Publishing
May 6, 2026
Aug 8, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted U...Show more
Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.Show less