CVE-2026-14979 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

CVE-2026-14979

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack PUBLISHED

Description (CNA)

IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.

Affected (CNA)

Vendor / product	Versions
IBM / Engineering Lifecycle Management	affected 7.0.3 ( Interim Fix 001 through ) Interim Fix 021; affected 7.1.0 ( Interim Fix 001 through ) Interim Fix 009; affected 7.2.0 and 7.2.0 Interim Fix 001

CWE

CWE-776

References

https://www.ibm.com/support/pages/node/7279963

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.