CVE-2021-39016: IBM Engineering Lifecycle Optimization - Publishing

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.

Affected products

• IBM Engineering Lifecycle Optimization - Publishing: version 6.0.6 only; version 6.0.6.1 only; version 7.0.1 only
• IBM Engineering Lifecycle Optimization Publishing: version 7.0 only; version 7.0.2 only

Published 2022-07-14. Last modified 2026-06-17.