Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by Improper Encoding of Output in Apache Log4j API (CVE-2026-49844)

Summary A security vulnerability CVE-2026-49844 has been identified in Apache Log4j API, a logging library used by applications, including IBM Engineering Lifecycle Optimization - Engineering Publishing. The vulnerability is caused by improper encoding of non-finite floating-point values NaN,...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a Denial of Service vulnerability in Jackson Core (CVE-2026-18401)

Summary A security vulnerability CVE-2026-18401 has been identified in the Jackson Core library used by IBM Engineering Lifecycle Optimization - Engineering Publishing. The non-blocking async JSON parser fails to enforce the maxNumberLength constraint default: 1,000 characters defined in...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a Cross-Site Scripting (XSS) vulnerability in Bootstrap (CVE-2024-6485)

Summary A security vulnerability CVE-2024-6485 has been identified in Bootstrap that may affect IBM Engineering Lifecycle Optimization - Engineering Publishing. The vulnerability exists in the button plugin's data-loading-text attribute, where improper input neutralization could allow attackers t...

PT-2024-13219 · Ibm · Ibm Engineering Lifecycle Optimization - Publishing

Name of the Vulnerable Software and Affected Versions: IBM Engineering Lifecycle Optimization - Publishing versions 7.0.2 through 7.0.3 Description: The issue allows an authenticated user to impersonate another user on the system due to the failure to invalidate session after logout...

CVE-2021-39018

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...