CVE-2026-3603 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack

[
  {
    "vendor": "IBM",
    "product": "Engineering Lifecycle Management",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.3 Interim Fix 001",
        "lessThanOrEqual": "Interim Fix 021",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.1.0 Interim Fix 001",
        "lessThanOrEqual": "Interim Fix 009",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.2.0 and 7.2.0 Interim Fix 001"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:engineering_lifecycle_management:7.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:engineering_lifecycle_management:7.2.0:*:*:*:*:*:*:*"
    ]
  }
]