← Back

CVE-2026-14979

nvd nist
Published: Jul 17, 2026Modified: Aug 11, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.

Affected (37)

Ibm
1 product
Engineering Lifecycle Management
Configuration A
37 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Engineering Lifecycle Management
Version 7.0.3
Engineering Lifecycle Management
Version 7.0.3 ifix001
Engineering Lifecycle Management
Version 7.0.3 ifix002
Engineering Lifecycle Management
Version 7.0.3 ifix003
Engineering Lifecycle Management
Version 7.0.3 ifix004
Engineering Lifecycle Management
Version 7.0.3 ifix005
Engineering Lifecycle Management
Version 7.0.3 ifix006
Engineering Lifecycle Management
Version 7.0.3 ifix007
Engineering Lifecycle Management
Version 7.0.3 ifix008
Engineering Lifecycle Management
Version 7.0.3 ifix009
Engineering Lifecycle Management
Version 7.0.3 ifix010
Engineering Lifecycle Management
Version 7.0.3 ifix011
Engineering Lifecycle Management
Version 7.0.3 ifix012
Engineering Lifecycle Management
Version 7.0.3 ifix013
Engineering Lifecycle Management
Version 7.0.3 ifix014
Engineering Lifecycle Management
Version 7.0.3 ifix015
Engineering Lifecycle Management
Version 7.0.3 ifix016
Engineering Lifecycle Management
Version 7.0.3 ifix017
Engineering Lifecycle Management
Version 7.0.3 ifix018
Engineering Lifecycle Management
Version 7.0.3 ifix018_security_fix
Engineering Lifecycle Management
Version 7.0.3 ifix019
Engineering Lifecycle Management
Version 7.0.3 ifix020
Engineering Lifecycle Management
Version 7.0.3 ifix021
Engineering Lifecycle Management
Version 7.1.0
Engineering Lifecycle Management
Version 7.1.0 ifix0010
Engineering Lifecycle Management
Version 7.1.0 ifix001
Engineering Lifecycle Management
Version 7.1.0 ifix002
Engineering Lifecycle Management
Version 7.1.0 ifix003
Engineering Lifecycle Management
Version 7.1.0 ifix004
Engineering Lifecycle Management
Version 7.1.0 ifix004_security_fix
Engineering Lifecycle Management
Version 7.1.0 ifix005
Engineering Lifecycle Management
Version 7.1.0 ifix006
Engineering Lifecycle Management
Version 7.1.0 ifix007
Engineering Lifecycle Management
Version 7.1.0 ifix008
Engineering Lifecycle Management
Version 7.1.0 ifix009
Engineering Lifecycle Management
Version 7.2.0
Engineering Lifecycle Management
Version 7.2.0 ifix001

Related CWEs

CWE-776
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.