Skip to content
OpenAdvisories
High · 7.2 CVE-2026-4051 EUVD-2026-31951GHSA-p33w-c5h4-h687

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution

Published May 26, 2026 · Updated May 28, 2026 · Assigned by ibm

Vendor: IBM Product: Engineering Lifecycle Management

Description

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Affected products

VendorProductAffectedFixed
IBM Engineering Lifecycle Management 7.0.3 – ≤ Interim Fix 021, 7.1.0 – ≤ Interim Fix 009, 7.2.0 – ≤ Interim Fix 001 —

References