Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
IBM

IBM Engineering Lifecycle Management vulnerabilities

6 published CVEs name IBM Engineering Lifecycle Management among the affected products.

Published CVEs
6
Last 12 months
4
Critical
2
Known exploited
0

Critical 2High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20251
  3. 20264

Newest CVEs

  • CVE-2026-14979

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

    IBM · Engineering Lifecycle Management

    Medium5.3
  • CVE-2026-3660

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass

    IBM · Engineering Lifecycle Management

    Critical9.8
  • CVE-2026-3603

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack

    IBM · Engineering Lifecycle Management

    High7.1
  • CVE-2026-4051

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution

    IBM · Engineering Lifecycle Management

    High7.2
  • CVE-2025-36157

    IBM Engineering Lifecycle Management incorrect authorization

    IBM · Engineering Lifecycle Management

    Critical9.8
  • CVE-2022-34355

    IBM Jazz Foundation information disclosure

    IBM · Engineering Lifecycle Management

    Medium4.0