CVE-2021-39015

IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213655.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/213655VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6603333Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/213655VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6603333Patch, Vendor Advisory

Published

Jul 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39008 IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow…4.9
• CVE-2021-39009IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user …5.5
• CVE-2021-3901firefly-iii is vulnerable to Cross-Site Request Forgery (CSR…8.8
• CVE-2021-39011 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0…4.9
• CVE-2021-39013IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.…6.5
• CVE-2021-39014IBM Cloud Object System 3.15.8.97 is vulnerable to stored cr…5.4
• CVE-2021-39016IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…4.3
• CVE-2021-39017IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…6.5
• CVE-2021-39018IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…4.3
• CVE-2021-39019IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…6.5
• CVE-2021-3902An improper restriction of external entities (XXE) vulnerabi…9.8
• CVE-2021-39020IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores …5.3