CVE-2026-3603
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
May 26, 2026
Vendor
unknown
Description
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.