5.4
Moyenne
CVE-2018-1585 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect…
Description
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rational Software Architect Design Manager 6.0 | 6.0 → 6.0.1 | Pas de correctif indiqué |
| Rational Software Architect Design Manager 5.0 | 5.0 → 5.0.2 | Pas de correctif indiqué |
| Rational Rhapsody Design Manager 6.0 | 6.0 → 6.0.5 | Pas de correctif indiqué |
| Rational Rhapsody Design Manager 5.0 | 5.0 → 5.0.2 | Pas de correctif indiqué |
Autres CVE de Rational Software Architect Design Manager
Les 17 CVE de Rational Software Architect Design Manager →
CVE-2018-1694
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM…
5.9
Moyenne
CVE-2018-1606
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM…
4.3
Moyenne
CVE-2018-1394
Multiple IBM Rational products are vulnerable to cross-site scripting
5.4
Moyenne
CVE-2017-1753
Multiple IBM Rational products are vulnerable to HTML injection
5.4
Moyenne