CVE Catalog
CVE-2026-3660
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.58%
44th percentile - higher than 44% of all known CVEs
Summary
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.
Risk Assessment
An unauthenticated attacker can modify server configuration and gain unauthorized access to the application, potentially compromising data confidentiality and integrity.
Recommendation
Apply the patch from IBM or upgrade to a version that fixes this vulnerability.
Original NVD description (English source)
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.