5.4
Medium
CVE-2018-1535 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect…
Description
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational Rhapsody Design Manager 6.0 | 6.0 → 6.0.5 | No fix stated |
| Rational Rhapsody Design Manager 5.0 | 5.0 → 5.0.2 | No fix stated |
| Rational Software Architect Design Manager 6.0 | 6.0 → 6.0.1 | No fix stated |
| Rational Software Architect Design Manager 5.0 | 5.0 → 5.0.2 | No fix stated |
Other CVEs of Rational Rhapsody Design Manager
The 42 CVEs of Rational Rhapsody Design Manager →
CVE-2021-20357
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Medium
CVE-2020-4855
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Medium
CVE-2020-4865
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Medium
CVE-2020-4547
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim
5.4
Medium