IBM Engineering Lifecycle Management vulnerabilities

49 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Latest IBM Engineering Lifecycle Management vulnerabilities

CVE-2026-14979 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack (CVSS 7.5)
CVE-2026-4051 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution (CVSS 7.2)
CVE-2026-3660 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass (CVSS 9.8)
CVE-2026-3603 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack (CVSS 7.1)
CVE-2025-36033 — IBM Engineering Lifecycle Management - Global Configuration Management is vulnerable to cross-site scripting (CVSS 5.4)
CVE-2022-34355 — IBM Jazz Foundation information disclosure (CVSS 5.5)
CVE-2021-29670 — (CVSS 5.4)
CVE-2021-29668 — (CVSS 5.4)
CVE-2021-20371 — (CVSS 6.5)
CVE-2021-20348 — (CVSS 5.4)
CVE-2021-20347 — (CVSS 5.4)
CVE-2021-20346 — (CVSS 5.4)
CVE-2021-20345 — (CVSS 5.4)
CVE-2021-20343 — (CVSS 5.4)
CVE-2021-20338 — (CVSS 5.4)
CVE-2020-5030 — (CVSS 5.4)
CVE-2020-4977 — (CVSS 5.4)
CVE-2020-4732 — (CVSS 6.5)
CVE-2020-4495 — (CVSS 8.8)
CVE-2021-20519 — (CVSS 5.4)
CVE-2020-4965 — (CVSS 7.5)
CVE-2020-4964 — (CVSS 4.3)
CVE-2020-4920 — (CVSS 5.4)
CVE-2021-20520 — (CVSS 5.4)
CVE-2021-20518 — (CVSS 5.4)