<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: engineering lifecycle optimization publishing</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-41768: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an </title><link>https://patchthecve.com/cve/CVE-2024-41768.html</link><guid>https://patchthecve.com/cve/CVE-2024-41768.html</guid><pubDate>Wed, 17 Jun 2026 07:48:12 +0000</pubDate><description>MEDIUM 6.5: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.</description></item><item><title>CVE-2024-41767: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection</title><link>https://patchthecve.com/cve/CVE-2024-41767.html</link><guid>https://patchthecve.com/cve/CVE-2024-41767.html</guid><pubDate>Wed, 17 Jun 2026 07:48:12 +0000</pubDate><description>HIGH 7.3: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.</description></item><item><title>CVE-2024-41766: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3  could allow a remote attacker to cause a </title><link>https://patchthecve.com/cve/CVE-2024-41766.html</link><guid>https://patchthecve.com/cve/CVE-2024-41766.html</guid><pubDate>Wed, 17 Jun 2026 07:48:11 +0000</pubDate><description>HIGH 7.5: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3  could allow a remote attacker to cause a denial of service using a complex regular expression.</description></item><item><title>CVE-2024-41765: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse </title><link>https://patchthecve.com/cve/CVE-2024-41765.html</link><guid>https://patchthecve.com/cve/CVE-2024-41765.html</guid><pubDate>Wed, 17 Jun 2026 07:48:11 +0000</pubDate><description>MEDIUM 6.5: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing &quot;dot dot&quot; sequences (/../) to view arbitrary files on the system.</description></item><item><title>CVE-2024-41763: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3  uses weaker than expected cryptographic a</title><link>https://patchthecve.com/cve/CVE-2024-41763.html</link><guid>https://patchthecve.com/cve/CVE-2024-41763.html</guid><pubDate>Wed, 17 Jun 2026 07:48:11 +0000</pubDate><description>MEDIUM 5.9: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3  uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.</description></item><item><title>CVE-2023-45188: IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbit</title><link>https://patchthecve.com/cve/CVE-2023-45188.html</link><guid>https://patchthecve.com/cve/CVE-2023-45188.html</guid><pubDate>Wed, 17 Jun 2026 06:28:23 +0000</pubDate><description>MEDIUM 6.5: IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions.  By sending a specially crafted request, a remote attacker could exploit this vulnerability to upload a malicious file, whic</description></item></channel></rss>