9.8
Critical
CVE-2026-3660 IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update…
Description
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Lifecycle Management 7.2 | 7.2.0 → latest | No fix stated |
| Engineering Lifecycle Management 7.1 | 7.1.0 → latest | No fix stated |
| Engineering Lifecycle Management 7.0 | 7.0.3 → latest | No fix stated |
Other CVEs of Engineering Lifecycle Management
The 6 CVEs of Engineering Lifecycle Management →
CVE-2026-14979
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001…
5.3
Medium
CVE-2026-3603
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through …
7.1
High
CVE-2026-4051
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to…
7.2
High
CVE-2025-36157
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an…
9.8
Critical