Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-39727

IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing

Description

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Engineering Insights

Default version status: unaffected

  • 7.0.2, 7.0.3affected

References