5.4
Moyenne
CVE-2018-1535 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect…
Description
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rational Rhapsody Design Manager 6.0 | 6.0 → 6.0.5 | Pas de correctif indiqué |
| Rational Rhapsody Design Manager 5.0 | 5.0 → 5.0.2 | Pas de correctif indiqué |
| Rational Software Architect Design Manager 6.0 | 6.0 → 6.0.1 | Pas de correctif indiqué |
| Rational Software Architect Design Manager 5.0 | 5.0 → 5.0.2 | Pas de correctif indiqué |
Autres CVE de Rational Rhapsody Design Manager
Les 42 CVE de Rational Rhapsody Design Manager →
CVE-2021-20357
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2020-4855
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2020-4865
IBM Jazz Foundation products is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2020-4547
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim
5.4
Moyenne