Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-14979 EUVD-2026-45300GHSA-w545-wjm2-rf4h

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

Published Jul 17, 2026 · Updated Jul 28, 2026 · Assigned by ibm

Vendor: IBM Product: Engineering Lifecycle Management

Description

IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.

Affected products

VendorProductAffectedFixed
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 – ≤ ) Interim Fix 021, 7.1.0 ( Interim Fix 001 – ≤ ) Interim Fix 009, 7.2.0 and 7.2.0 Interim Fix 001 —

References