Vulnerabilities > IBM > Engineering Lifecycle Optimization Publishing > 2.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2016-08-08	CVE-2016-2914	Unrestricted Upload of File with Dangerous Type vulnerability in IBM Engineering Lifecycle Optimization - Publishing 2.0.1 Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension. network low complexity ibm CWE-434	5.4
2016-08-08	CVE-2016-2912	Cross-site Scripting vulnerability in IBM Engineering Lifecycle Optimization - Publishing 2.0.1 Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. network low complexity ibm CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.