{"id":"CVE-2021-39016","aliases":["EUVD-2021-25453","GHSA-g28g-9v8x-765w"],"status":"published","title":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does...","description":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/PR:L/C:N/I:L/UI:N/S:U/AC:L/A:N/AV:N/RL:O/RC:C/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0058,"percentile":0.48042,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-07-14T16:15:29Z","modified":"2026-06-17T04:02:58Z","products":[{"vendor":"ibm","product":"engineering lifecycle optimization publishing"},{"vendor":"ibm","product":"engineering_lifecycle_optimization_-_publishing"},{"vendor":"ibm","product":"engineering_lifecycle_optimization_publishing"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6603335","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/213722","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39016"},{"url":"https://github.com/advisories/GHSA-g28g-9v8x-765w"}],"sources":{"cve":[{"id":"CVE-2021-39016","description":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.","status":"published","published":"2022-07-14T16:15:29.687Z","modified":"2024-09-17T03:33:48.994Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/PR:L/C:N/I:L/UI:N/S:U/AC:L/A:N/AV:N/RL:O/RC:C/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:09.540052Z"}],"euvd":[{"id":"EUVD-2021-25453","description":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.","status":"published","published":"2022-07-14T16:15:29Z","modified":"2024-09-17T03:33:48Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/PR:L/C:N/I:L/UI:N/S:U/AC:L/A:N/AV:N/RL:O/RC:C/E:U","level":"medium"}],"updated_at":"2026-11-03T00:28:30.770637Z"}],"ghsa":[{"id":"GHSA-g28g-9v8x-765w","title":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does...","description":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.","status":"published","published":"2022-07-15T00:00:16Z","modified":"2023-01-27T05:06:25Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T14:42:54.564328Z"}],"nvd":[{"id":"CVE-2021-39016","description":"IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.","status":"published","published":"2022-07-14T17:15:08.203Z","modified":"2026-06-17T04:02:58.48Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:06.501652Z"}]}}