Skip to content

Known vulnerabilities in IBM Rational Rhapsody Design Manager

Is your version affected?

CVE Summary Score Published
CVE-2018-1536 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect… 5.4 Medium Jul 19, 2018
CVE-2018-1535 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect… 5.4 Medium Jul 19, 2018
CVE-2018-1492 IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to… 4.3 Medium Jul 10, 2018
CVE-2018-1423 IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in… 4.3 Medium Jul 10, 2018
CVE-2017-1509 IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that… 4.3 Medium Jul 6, 2018
CVE-2017-1559 Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests 3.1 Low Jul 6, 2018
CVE-2017-1488 An undisclosed vulnerability in Jazz common products exists with potential for information disclosure 3.7 Low Jul 6, 2018
CVE-2017-1237 IBM Jazz based applications are vulnerable to cross-site scripting 5.4 Medium Jul 6, 2018
CVE-2017-1734 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1725 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1700 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1462 IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting Not rated Feb 21, 2018
CVE-2017-1249 IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting Not rated Jul 24, 2017
CVE-2017-1287 IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Not rated Jul 24, 2017
CVE-2017-1245 IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting Not rated Jul 24, 2017
CVE-2016-8975 IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting Not rated Jul 24, 2017
CVE-2016-9698 IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE)… Not rated Jun 8, 2017

Other IBM products