IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HIBM Engineering Lifecycle Management
APPIbm7.0.37.1.07.2.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje
Powiązane podatności
CVE-2026-3660CRITICAL9.8PL ✓ten sam produkt
IBM Engineering Lifecycle Management — nieautoryzowany zapis plików konfiguracyjnych serwera
CVE-2026-3603HIGH7.1ten sam produkt
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 th...
CVE-2020-4495HIGH8.8ten sam produkt
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions...
CVE-2020-4965HIGH7.5ten sam produkt
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker t...
CVE-2021-20502HIGH7.1ten sam produkt
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing X...