[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjVdXHsRvUSbKyLa52978Ci1sMceHRPMvw3QKjHann2I":3,"g5a-risk:CVE-2023-45188":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":29,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":64,"references":65,"referencesCount":64,"weaknesses":79,"weaknessesCount":88,"isActivelyExploited":59,"cisaInfo":29,"otxData":29,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":132,"notableEvents":133},"CVE-2023-45188","What is CVE-2023-45188?","IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions.  By sending a specially crafted request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system.  IBM X-Force ID:  268751.","IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation o...","2024-06-09T13:15:49.537","2026-06-17T06:28:23.47",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":39,"CVSSMetricV2":40,"CVSSMetricV40":41},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@us.ibm.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N","NETWORK","LOW","NONE","UNCHANGED","HIGH",6.5,"MEDIUM",null,2.8,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"CRITICAL",3.9,5.9,[],[],[],0.00651,[42,42,42,42,42,42,42],"Critical",[46,51,54,60],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"ibm","engineering_lifecycle_optimization_publishing","7.0.2","cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"7.0.3","cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":59},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",false,{"vendor":61,"product":62,"version":57,"criteria":63,"vulnerable":59},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",4,[66,71,75,77],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F268751","Ibmcloud",[70],"Vendor Advisory",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F7156757","Ibm",[70],{"url":67,"source":68,"tags":76},[70],{"url":72,"source":73,"tags":78},[70],[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2023-45188? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-45188, a critical severity cyber security vulnerability from 2024. IBM Engineering Lifecycle Optimization Publishing 7.0.2...","CVE-2023-45188, CVE-2023-45188 vulnerability, CVE-2023-45188 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ibm security, linux security, microsoft security, engineering_lifecycle_optimization_publishing vulnerability, linux_kernel vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2023-45188",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-45188","Cybersecurity","CVE-2023-45188, CVE-2023-45188 vulnerability, CVE-2023-45188 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":117,"Negate":29,"Nodes":118},"AND",[119,126],{"Operator":120,"Negate":59,"CPEMatch":121},"OR",[122,124],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":123,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"4435D82A-8E20-4B70-AB17-A0564F8BFF54",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":125,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"BB7C88CB-0890-4077-B6D2-DE2B8FADA33B",{"Operator":120,"Negate":59,"CPEMatch":127},[128,130],{"Vulnerable":59,"Criteria":58,"MatchCriteriaID":129,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":59,"Criteria":63,"MatchCriteriaID":131,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":135,"version":136},1793231326262,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},55,"Medium","Plan remediation","2026-10-28T07:02:33.03416+00:00"]