https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-39727.htmlhttps://patchthecve.com/cve/CVE-2024-39727.htmlWed, 17 Jun 2026 07:42:33 +0000MEDIUM 6.1: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.https://patchthecve.com/cve/CVE-2024-39725.htmlhttps://patchthecve.com/cve/CVE-2024-39725.htmlWed, 17 Jun 2026 07:42:32 +0000MEDIUM 5.3: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.https://patchthecve.com/cve/CVE-2024-39726.htmlhttps://patchthecve.com/cve/CVE-2024-39726.htmlWed, 17 Jun 2026 07:42:33 +0000HIGH 8.2: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.