CVE-2026-14979: engineering lifecycle management 7.0.3, 7.1.0, 7.2.0; +1 more affected products

Affected technology

engineering lifecycle management · 7.0.3
ibm

engineering lifecycle management · 7.0.3 · update ifix001
ibm

engineering lifecycle management · 7.0.3 · update ifix002
ibm

engineering lifecycle management · 7.0.3 · update ifix003
ibm

engineering lifecycle management · 7.0.3 · update ifix004
ibm

engineering lifecycle management · 7.0.3 · update ifix005
ibm

engineering lifecycle management · 7.0.3 · update ifix006
ibm

engineering lifecycle management · 7.0.3 · update ifix007
ibm

engineering lifecycle management · 7.0.3 · update ifix008
ibm

engineering lifecycle management · 7.0.3 · update ifix009
ibm

engineering lifecycle management · 7.0.3 · update ifix010
ibm

engineering lifecycle management · 7.0.3 · update ifix011
ibm

engineering lifecycle management · 7.0.3 · update ifix012
ibm

engineering lifecycle management · 7.0.3 · update ifix013
ibm

engineering lifecycle management · 7.0.3 · update ifix014
ibm

engineering lifecycle management · 7.0.3 · update ifix015
ibm

engineering lifecycle management · 7.0.3 · update ifix016
ibm

engineering lifecycle management · 7.0.3 · update ifix017
ibm

engineering lifecycle management · 7.0.3 · update ifix018
ibm

engineering lifecycle management · 7.0.3 · update ifix018_security_fix
ibm

engineering lifecycle management · 7.0.3 · update ifix019
ibm

engineering lifecycle management · 7.0.3 · update ifix020
ibm

engineering lifecycle management · 7.0.3 · update ifix021
ibm

engineering lifecycle management · 7.1.0
ibm

engineering lifecycle management · 7.1.0 · update ifix001
ibm

engineering lifecycle management · 7.1.0 · update ifix0010
ibm

engineering lifecycle management · 7.1.0 · update ifix002
ibm

engineering lifecycle management · 7.1.0 · update ifix003
ibm

engineering lifecycle management · 7.1.0 · update ifix004
ibm

engineering lifecycle management · 7.1.0 · update ifix004_security_fix
ibm

engineering lifecycle management · 7.1.0 · update ifix005
ibm

engineering lifecycle management · 7.1.0 · update ifix006
ibm

engineering lifecycle management · 7.1.0 · update ifix007
ibm

engineering lifecycle management · 7.1.0 · update ifix008
ibm

engineering lifecycle management · 7.1.0 · update ifix009
ibm

engineering lifecycle management · 7.2.0
ibm

engineering lifecycle management · 7.2.0 · update ifix001
ibm

Engineering Lifecycle Management · 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, 7.2.0 and 7.2.0 Interim Fix 001
IBM

Description’s affected range: through ) Interim Fix 021

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote attacker could cause a denial of service due to improper handling of XML entity expansion. Vendor/CNA’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality and integrity impact as none; availability impact as low. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.