EL
Product
Engineering Lifecycle Management
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 42Low 0
Watch
Add Engineering Lifecycle Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4495 | 8.8 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2026-14979 | 7.5 | Jul 17 | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack Affected: 7.0.3 ( Interim Fix 001 through ) Interim Fix 021; 7.1.0 ( Interim Fix 001 through ) Interim Fix 009; 7.2.0 and 7.2.0 Interim Fix 001 |
| CVE-2020-4965 | 7.5 | Apr 12 | IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.0.0; 7.0.1; 7.0.2 |
| CVE-2026-4051 | 7.2 | May 26 | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution Affected: 7.0.3 through Interim Fix 021; 7.1.0 through Interim Fix 009; 7.2.0 through Interim Fix 001 |
| CVE-2026-3603 | 7.1 | May 26 | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack Affected: 7.0.3 Interim Fix 001 through Interim Fix 021; 7.1.0 Interim Fix 001 through Interim Fix 009; 7.2.0 and 7.2.0 Interim Fix 001 |
| CVE-2021-20502 | 7.1 | Mar 30 | IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.0 |
Showing 6