ibm engineering lifecycle optimization - engineering insights
productUScpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
1critical1high14medium0low
updated 2026-10-28
01
vulnerabilities (18)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2020-4495US | high8.8 | — |
| CVE-2021-20371US | medium6.5 | — |
| CVE-2020-4732US | medium6.5 | — |
| CVE-2024-39726US | — | — |
| CVE-2020-4974US | medium6.3 | — |
| CVE-2021-20348US | medium5.4 | — |
| CVE-2021-20347US | medium5.4 | — |
| CVE-2021-20346US | medium5.4 | — |
| CVE-2021-20345US | medium5.4 | — |
| CVE-2021-20343US | medium5.4 | — |
| CVE-2020-5004US | medium5.4 | — |
| CVE-2021-29670US | medium5.4 | — |
| CVE-2021-29668US | medium5.4 | — |
| CVE-2021-20338US | medium5.4 | — |
| CVE-2020-5030US | medium5.4 | — |
| CVE-2020-4977US | medium5.4 | — |
| CVE-2024-39725US | — | — |
| CVE-2024-39727US | critical9.8 | — |
02
weaknesses (7)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
- CWE-918Server-Side Request Forgery (SSRF)6 CVEs
- CWE-209Generation of Error Message Containing Sensitive Information2 CVEs
- CWE-1022Use of Web Link to Untrusted Target with window.opener Access1 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-266Incorrect Privilege Assignment1 CVEs
- CWE-611Improper Restriction of XML External Entity Reference1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE18 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan