9.8
Critical
CVE-2025-36157 IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an…
Description
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Lifecycle Management 7.1 | 7.1.0 → latest | No fix stated |
| Engineering Lifecycle Management 7.0 | 7.0.2 → latest | No fix stated |
Other CVEs of Engineering Lifecycle Management
The 6 CVEs of Engineering Lifecycle Management →
CVE-2026-14979
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001…
5.3
Medium
CVE-2026-3660
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update…
9.8
Critical
CVE-2026-3603
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through …
7.1
High
CVE-2026-4051
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to…
7.2
High