5.4
Medium
CVE-2018-1585 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect…
Description
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational Software Architect Design Manager 6.0 | 6.0 → 6.0.1 | No fix stated |
| Rational Software Architect Design Manager 5.0 | 5.0 → 5.0.2 | No fix stated |
| Rational Rhapsody Design Manager 6.0 | 6.0 → 6.0.5 | No fix stated |
| Rational Rhapsody Design Manager 5.0 | 5.0 → 5.0.2 | No fix stated |
Other CVEs of Rational Software Architect Design Manager
The 17 CVEs of Rational Software Architect Design Manager →
CVE-2018-1694
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM…
5.9
Medium
CVE-2018-1606
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM…
4.3
Medium
CVE-2018-1394
Multiple IBM Rational products are vulnerable to cross-site scripting
5.4
Medium
CVE-2017-1753
Multiple IBM Rational products are vulnerable to HTML injection
5.4
Medium