7.2
High
CVE-2026-4051 IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to…
Description
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Lifecycle Management 7.2 | 7.2.0 → latest | No fix stated |
| Engineering Lifecycle Management 7.1 | 7.1.0 → latest | No fix stated |
| Engineering Lifecycle Management 7.0 | 7.0.3 → latest | No fix stated |
Other CVEs of Engineering Lifecycle Management
The 6 CVEs of Engineering Lifecycle Management →
CVE-2026-14979
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001…
5.3
Medium
CVE-2026-3660
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update…
9.8
Critical
CVE-2026-3603
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through …
7.1
High
CVE-2025-36157
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an…
9.8
Critical