# IBM Rational Rhapsody Design Manager.

Every CVE that names IBM Rational Rhapsody Design Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20357.md)
  `CVE-2021-20357` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4865.md)
  `CVE-2020-4865` · CVE record: IBM Engineering Lifecycle Optimization and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4855.md)
  `CVE-2020-4855` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.](https://agentprime.io/advisories/CVE-2020-4547.md)
  `CVE-2020-4547` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4524.md)
  `CVE-2020-4524` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4733.md)
  `CVE-2020-4733` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4697.md)
  `CVE-2020-4697` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4691.md)
  `CVE-2020-4691` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2020-4544.md)
  `CVE-2020-4544` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2020-4487.md)
  `CVE-2020-4487` · CVE record: IBM Engineering Lifecycle Optimization and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4546.md)
  `CVE-2020-4546` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4522.md)
  `CVE-2020-4522` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4445.md)
  `CVE-2020-4445` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4542.md)
  `CVE-2020-4542` · CVE record: IBM Rational Rhapsody Design Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Aug 2020
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4525.md)
  `CVE-2020-4525` · CVE record: IBM Rational Rhapsody Design Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Aug 2020
- [IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to.](https://agentprime.io/advisories/CVE-2020-4410.md)
  `CVE-2020-4410` · CVE record: IBM Rational Rhapsody Design Manager · CVSS 4.3 Medium · Not analysed yet · Published 4 Aug 2020
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4396.md)
  `CVE-2020-4396` · CVE record: IBM Rational Rhapsody Design Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Aug 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4748.md)
  `CVE-2019-4748` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2020
- [IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the syst…](https://agentprime.io/advisories/CVE-2019-4457.md)
  `CVE-2019-4457` · CVE record: IBM Rational Rhapsody Design Manager · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2020
- [IBM Rational Team Concert: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02…](https://agentprime.io/advisories/CVE-2018-1694.md)
  `CVE-2018-1694` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Nov 2018
- [IBM Rational Team Concert: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through…](https://agentprime.io/advisories/CVE-2018-1606.md)
  `CVE-2018-1606` · CVE record: IBM Rational Team Concert and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2018
- [Multiple IBM Rational products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1394.md)
  `CVE-2018-1394` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2018
- [Multiple IBM Rational products are vulnerable to HTML injection.](https://agentprime.io/advisories/CVE-2017-1753.md)
  `CVE-2017-1753` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2018
- [IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…](https://agentprime.io/advisories/CVE-2018-1587.md)
  `CVE-2018-1587` · CVE record: IBM Rational Software Architect Design Manager and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2018
- [IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…](https://agentprime.io/advisories/CVE-2018-1585.md)
  `CVE-2018-1585` · CVE record: IBM Rational Software Architect Design Manager and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Jul 2018
- [IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…](https://agentprime.io/advisories/CVE-2018-1536.md)
  `CVE-2018-1536` · CVE record: IBM Rational Software Architect Design Manager and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Jul 2018
- [IBM Rational Rhapsody Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…](https://agentprime.io/advisories/CVE-2018-1535.md)
  `CVE-2018-1535` · CVE record: IBM Rational Rhapsody Design Manager and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Jul 2018
- [IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session.](https://agentprime.io/advisories/CVE-2018-1492.md)
  `CVE-2018-1492` · CVE record: IBM Rational Engineering Lifecycle Manager and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Jul 2018
- [IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system.](https://agentprime.io/advisories/CVE-2018-1423.md)
  `CVE-2018-1423` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Jul 2018
- [Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.](https://agentprime.io/advisories/CVE-2017-1559.md)
  `CVE-2017-1559` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 3.1 Low · Not analysed yet · Published 6 Jul 2018
- [IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks.](https://agentprime.io/advisories/CVE-2017-1509.md)
  `CVE-2017-1509` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 6 Jul 2018
- [An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.](https://agentprime.io/advisories/CVE-2017-1488.md)
  `CVE-2017-1488` · CVE record: IBM Rational Engineering Lifecycle Manager and 4 more · CVSS 3.7 Low · Not analysed yet · Published 6 Jul 2018
- [IBM Jazz based applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1237.md)
  `CVE-2017-1237` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Jul 2018
- [IBM Rational Engineering Lifecycle Manager: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…](https://agentprime.io/advisories/CVE-2017-1734.md)
  `CVE-2017-1734` · CVE record: IBM Rational Engineering Lifecycle Manager and 4 more · No CVSS score · Not analysed yet · Published 24 Apr 2018
- [IBM Rational Quality Manager: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…](https://agentprime.io/advisories/CVE-2017-1725.md)
  `CVE-2017-1725` · CVE record: IBM Rational Quality Manager and 4 more · No CVSS score · Not analysed yet · Published 24 Apr 2018
- [IBM Rational Team Concert: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…](https://agentprime.io/advisories/CVE-2017-1700.md)
  `CVE-2017-1700` · CVE record: IBM Rational Team Concert and 4 more · No CVSS score · Not analysed yet · Published 24 Apr 2018
- [IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1462.md)
  `CVE-2017-1462` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 21 Feb 2018
- [IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.](https://agentprime.io/advisories/CVE-2017-1287.md)
  `CVE-2017-1287` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 24 Jul 2017
- [IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1249.md)
  `CVE-2017-1249` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 24 Jul 2017
- [IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1245.md)
  `CVE-2017-1245` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 24 Jul 2017
- [IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2016-8975.md)
  `CVE-2016-8975` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 24 Jul 2017
- [IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.](https://agentprime.io/advisories/CVE-2016-9698.md)
  `CVE-2016-9698` · CVE record: IBM Rational Rhapsody Design Manager · No CVSS score · Not analysed yet · Published 8 Jun 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-rational-rhapsody-design-manager>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-rational-rhapsody-design-manager/>. Everything for agents: <https://agentprime.io/llms.txt>.