The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation lies in the improper restriction on XML references to external objects, which allows attackers to perform XXE attacks.

IBM Jazz Foundation environment has XXE vulnerability from improper external XML object restrictions.

Reporter	Title	Published	Views	Family All 10
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack	29 May 202620:02	–	ibm
ATTACKERKB	CVE-2026-3603	26 May 202618:17	–	attackerkb
CNNVD	IBM Engineering Lifecycle Management 安全漏洞	26 May 202600:00	–	cnnvd
CVE	CVE-2026-3603	26 May 202618:17	–	cve
Cvelist	CVE-2026-3603 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack	26 May 202618:17	–	cvelist
EUVD	EUVD-2026-31952	26 May 202618:17	–	euvd
NVD	CVE-2026-3603	26 May 202619:16	–	nvd
Positive Technologies	PT-2026-43374	26 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-3603	5 Jun 202619:21	–	redhatcve
Vulnrichment	CVE-2026-3603 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack	26 May 202618:17	–	vulnrichment