Product by IBM

    IBM Engineering Lifecycle Management

    50 known vulnerabilities in IBM Engineering Lifecycle Management (IBM), 0 of them actively exploited (CISA KEV).

    Key figures

    50

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in IBM Engineering Lifecycle Management (IBM)
    HighCVE-2020-4495

    IBM Engineering Test Management: Improper Access Control

    also in 11 other products

    		8.8
    CriticalCVE-2026-3660

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass

    		9.8
    HighCVE-2021-20502

    IBM Engineering Lifecycle Optimization: XML External Entity (XXE)

    also in 6 other products

    		7.1
    CriticalCVE-2025-36157

    IBM Engineering Lifecycle Management incorrect authorization

    also in 1 other product

    		9.8
    HighCVE-2026-14979

    IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

    		7.5
    HighCVE-2026-4051

    IBM Engineering Lifecycle Management: Exposed Dangerous Method or Function

    		7.2
    HighCVE-2026-3603

    IBM Engineering Lifecycle Management: Improper Restriction of XML External Entity Reference

    		7.1
    MediumCVE-2021-20371

    IBM Rational Collaborative Lifecycle Management: Information Disclosure

    also in 11 other products

    		4.3
    MediumCVE-2020-4857

    IBM Rational Quality Manager: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.4
    MediumCVE-2020-4547

    IBM Engineering Workflow Management: security vulnerability

    also in 16 other products

    		5.4
    MediumCVE-2020-4544

    IBM Engineering Workflow Management: Information Disclosure

    also in 15 other products

    		4.3
    MediumCVE-2020-4487

    IBM Engineering Lifecycle Optimization: Information Disclosure

    also in 15 other products

    		4.3
    HighCVE-2020-4965

    IBM Rational DOORS Next Generation: security vulnerability

    also in 15 other products

    		5.9
    MediumCVE-2020-4920

    IBM Rational Engineering Lifecycle Manager: Cross-Site Scripting (XSS)

    also in 15 other products

    		6.4
    MediumCVE-2020-4863

    IBM Rational Quality Manager: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.4
    MediumCVE-2020-4856

    IBM Rational Team Concert: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.4
    MediumCVE-2021-20357

    IBM Rational DOORS Next Generation: Cross-Site Scripting (XSS)

    also in 16 other products

    		5.4
    MediumCVE-2020-4865

    IBM Engineering Lifecycle Optimization: Cross-Site Scripting (XSS)

    also in 16 other products

    		5.4
    MediumCVE-2020-4855

    IBM Rational Collaborative Lifecycle Management: Cross-Site Scripting (XSS)

    also in 16 other products

    		5.4
    MediumCVE-2020-4524

    IBM Rational Collaborative Lifecycle Management: Cross-Site Scripting (XSS)

    also in 16 other products

    		5.4
    MediumCVE-2020-4732

    IBM Rational DOORS Next Generation: Information Disclosure

    also in 11 other products

    		4.3
    MediumCVE-2021-20519

    IBM Rational Quality Manager: Cross-Site Scripting (XSS)

    also in 15 other products

    		5.4
    MediumCVE-2021-20351

    IBM Rational Team Concert: Cross-Site Scripting (XSS)

    also in 9 other products

    		5.4
    MediumCVE-2021-20350

    IBM Rational Quality Manager: Cross-Site Scripting (XSS)

    also in 9 other products

    		5.4
    MediumCVE-2021-20340

    IBM Rational DOORS Next Generation: Cross-Site Scripting (XSS)

    also in 9 other products

    		5.4

    All vulnerabilities in search

    News

    All products by IBM