# Ibm Rational Engineering Lifecycle Manager


- [CVE-2020-4495](https://insights.sbomify.com/CVE-2020-4495/): Auth bypass in Engineering Lifecycle Optimization (high 8.8)
- [CVE-2016-9707](https://insights.sbomify.com/CVE-2016-9707/): XML external entity in Rational Collaborative Lifecycle Management (high 8.1)
- [CVE-2015-7440](https://insights.sbomify.com/CVE-2015-7440/): Privilege escalation in n/a (high 7.8)
- [CVE-2021-29774](https://insights.sbomify.com/CVE-2021-29774/): Privilege escalation in Engineering Lifecycle Optimization (high 7.5)
- [CVE-2021-20502](https://insights.sbomify.com/CVE-2021-20502/): XML external entity in Engineering Lifecycle Optimization (high 7.1)
- [CVE-2018-1846](https://insights.sbomify.com/CVE-2018-1846/): XML external entity in Rational Engineering Lifecycle Manager (high 7.1)
- [CVE-2018-1588](https://insights.sbomify.com/CVE-2018-1588/): XML external entity in Rational Engineering Lifecycle Manager (high 7.1)
- [CVE-2018-1607](https://insights.sbomify.com/CVE-2018-1607/): XML external entity in Rational Engineering Lifecycle Manager (high 7.1)
- [CVE-2015-1928](https://insights.sbomify.com/CVE-2015-1928/): Other in n/a (medium 6.8)
- [CVE-2021-29786](https://insights.sbomify.com/CVE-2021-29786/): Information disclosure in Engineering Lifecycle Optimization (medium 6.5)
- [CVE-2019-4252](https://insights.sbomify.com/CVE-2019-4252/): Path traversal in Rational Collaborative Lifecycle Management (medium 6.5)
- [CVE-2017-1700](https://insights.sbomify.com/CVE-2017-1700/): Missing authorization in Rational Collaborative Lifecycle Management (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/rational-engineering-lifecycle-manager/