SQL Injection Vulnerability in IBM Engineering Lifecycle Optimization Product
CVE-2021-39018
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 14 July 2022
What is CVE-2021-39018?
IBM Engineering Lifecycle Optimization - Publishing versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 are susceptible to a SQL injection vulnerability that can potentially expose sensitive information through error messages generated by SQL queries. This exposure could provide attackers with critical insights that facilitate further exploitation of the system. Organizations using these affected versions should urgently review and apply the necessary updates to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Engineering Lifecycle Optimization Publishing 6.0.6
Engineering Lifecycle Optimization Publishing 6.0.6.1
Engineering Lifecycle Optimization Publishing 7.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved