Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix017:*:*:*:*:*:*

part: a version: 7.0.3 update: ifix017

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductJazz Foundation (f5eca551-80fe-5cc4-9da5-b3c7b57d7224)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36157 vulnerable 2026-06-08 07:21:01.319327 IBM Engineering Lifecycle Management incorrect authorization
CRITICAL (9.8)
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Published: 2025-08-24T01:14:41.359Z
Updated: 2026-02-26T17:48:14.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15395 vulnerable 2026-06-08 07:06:36.193502 IBM Jazz Foundation access control violation
MEDIUM (4.3)
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
Published: 2026-02-02T15:10:56.983Z
Updated: 2026-02-02T16:45:31.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.