Skip to content
OpenAdvisories

Product · IBM

Engineering Lifecycle Management

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3660

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass

    IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

    IBM Engineering Lifecycle Management
  • Critical 9.8
    CVE-2025-36157

    IBM Engineering Lifecycle Management incorrect authorization

    IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.

    IBM Engineering Lifecycle Management