IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HIBM Engineering Lifecycle Management
APPIbm7.0.37.1.07.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2026-3660CRITICAL9.8PL ✓ten sam produkt
IBM Engineering Lifecycle Management — nieautoryzowany zapis plików konfiguracyjnych serwera
CVE-2026-3603HIGH7.1ten sam produkt
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 th...
CVE-2020-4495HIGH8.8ten sam produkt
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions...
CVE-2020-4965HIGH7.5ten sam produkt
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker t...
CVE-2021-20502HIGH7.1ten sam produkt
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing X...