Known vulnerabilities in IBM Corporation Engineering Workflow Management

Vendor: IBM Corporation

Website: https://www.ibm.com/us-en

Total Security Bulletins: 30

Security bulletins (30)

Secuity bulletin	Severity	Status	Published
SB2024061007: Multiple vulnerabilities in IBM Engineering Lifecycle Engineering product	Medium	Patched	10.06.2024
SB2024052827: Stored cross-site scripting in IBM Engineering Workflow Management (EWM)	Low	Patched	28.05.2024
SB2024051311: XML External Entity injection in IBM Engineering Lifecycle Engineering product	High	Patched	13.05.2024
SB2024051310: Resource exhaustion in IBM Engineering Lifecycle Engineering product	Medium	Patched	13.05.2024
SB2024051307: Server-Side Request Forgery (SSRF) in IBM Engineering Lifecycle Engineering product	Medium	Patched	13.05.2024
SB2024051306: Resource exhaustion in IBM Engineering Lifecycle Engineering product	Medium	Patched	13.05.2024
SB2024050803: Resource exhaustion in IBM Engineering Lifecycle Engineering product	Medium	Patched	08.05.2024
SB2024050801: Resource exhaustion in IBM Engineering Lifecycle Engineering product	Medium	Patched	08.05.2024
SB2024032049: Use of a broken or risky cryptographic algorithm in IBM Engineering Lifecycle Engineering	Low	Patched	20.03.2024
SB2024030708: Input validation error in IBM Engineering Lifecycle Engineering	Medium	Patched	07.03.2024
SB2023101238: Permissions, privileges, and access controls in IBM Engineering Workflow Management (EWM)	Low	Patched	12.10.2023
SB2023071923: Improper input validation in The IBM Engineering Lifecycle Engineering product	Medium	Patched	19.07.2023
SB2023071311: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Medium	Patched	13.07.2023
SB2023071012: NULL pointer dereference in IBM Engineering Workflow Management (EWM)	Medium	Patched	10.07.2023
SB2023071008: Cryptographic issues in IBM Engineering Workflow Management (EWM)	Low	Patched	10.07.2023
SB2023071007: Out-of-bounds read in IBM Engineering Workflow Management (EWM)	Medium	Patched	10.07.2023
SB2023071006: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Medium	Patched	10.07.2023
SB2023071004: Raccoon attack in IBM Engineering Workflow Management (EWM)	Medium	Patched	10.07.2023
SB2023071002: Improper validation of certificate with host mismatch in The IBM Engineering Lifecycle Engineering	Low	Patched	10.07.2023
SB2023032835: Incorrect regular expression in IBM Engineering Workflow Management (EWM)	Medium	Patched	28.03.2023
SB2023032829: Prototype pollution in IBM Engineering Workflow Management (EWM)	Medium	Patched	28.03.2023
SB2023012523: Multiple vulnerabilities in IBM Engineering Workflow Management and Rational Team Concert	Medium	Patched	25.01.2023
SB2022093003: Multiple vulnerabilities in IBM Continuous Engineering products based on IBM Jazz Technology	Medium	Patched	30.09.2022
SB2022062216: Denial of service in IBM Rational Team Concert (RTC) and IBM Engineering Workflow Management (EWM)	Low	Patched Exploited	22.06.2022
SB2022011107: Information disclosure in IBM Engineering Workflow Management (EWM)	Low	Patched	11.01.2022
SB2021040126: Cross-site scripting in IBM Engineering Workflow Management	Low	Patched	01.04.2021
SB2020042443: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Medium	Patched	24.04.2020
SB2020042445: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Low	Patched Exploited	24.04.2020
SB2018042442: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Medium	Patched	24.04.2018
SB2016042401: Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)	Low	Patched	24.04.2016