Advisories · Technology

IBM Engineering Lifecycle Management.

Every CVE that names IBM Engineering Lifecycle Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14979 CVE record

CVSS 5.3 Medium

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack
- IBM Engineering Lifecycle Management
- Denial of service
Not analysed yet 17 Jul 2026
CVE-2026-3660 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass
- IBM Engineering Lifecycle Management
- Broken access control
Not analysed yet 26 May 2026
CVE-2026-3603 CVE record

CVSS 7.1 High

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack
- IBM Engineering Lifecycle Management
- XML external entities (XXE)
Not analysed yet 26 May 2026
CVE-2026-4051 CVE record

CVSS 7.2 High

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution
- IBM Engineering Lifecycle Management
- CWE-749
Not analysed yet 26 May 2026
CVE-2025-36157 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM Engineering Lifecycle Management incorrect authorization
- IBM Engineering Lifecycle Management
- Broken access control
Not analysed yet 24 Aug 2025
CVE-2022-34355 CVE record

CVSS 4.0 Medium

IBM Jazz Foundation information disclosure
- IBM Engineering Lifecycle Management
- Information disclosure
Not analysed yet 6 Oct 2023