CVE-2026-14979
EUVD-2026-4530017.07.2026, 20:17
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | engineering_lifecycle_management | 7.0.3 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix001 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix002 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix003 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix004 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix005 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix006 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix007 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix008 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix009 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix010 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix011 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix012 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix013 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix014 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix015 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix016 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix017 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix018 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix018_security_fix |
| ibm | engineering_lifecycle_management | 7.0.3:ifix019 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix020 |
| ibm | engineering_lifecycle_management | 7.0.3:ifix021 |
| ibm | engineering_lifecycle_management | 7.1.0 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix001 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix0010 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix002 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix003 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix004 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix004_security_fix |
| ibm | engineering_lifecycle_management | 7.1.0:ifix005 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix006 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix007 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix008 |
| ibm | engineering_lifecycle_management | 7.1.0:ifix009 |
| ibm | engineering_lifecycle_management | 7.2.0 |
| ibm | engineering_lifecycle_management | 7.2.0:ifix001 |
𝑥
= Vulnerable software versions