Advisories · Technology

IBM Rational Rhapsody Design Manager.

Every CVE that names IBM Rational Rhapsody Design Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-20357 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Rational Quality Manager
Not analysed yet 27 Jan 2021
CVE-2020-4865 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Engineering Lifecycle Optimization
- IBM Rational Rhapsody Design Manager
Not analysed yet 27 Jan 2021
CVE-2020-4855 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Team Concert
Not analysed yet 27 Jan 2021
CVE-2020-4547 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.
- IBM Engineering Workflow Management
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 27 Jan 2021
CVE-2020-4524 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Team Concert
Not analysed yet 27 Jan 2021
CVE-2020-4733 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products are vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Engineering Workflow Management
Not analysed yet 8 Jan 2021
CVE-2020-4697 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products are vulnerable to cross-site scripting.
- IBM Rational Team Concert
- IBM Rational Rhapsody Design Manager
Not analysed yet 8 Jan 2021
CVE-2020-4691 CVE record

CVSS 4.6 Medium

IBM Jazz Foundation Products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Rhapsody Model Manager
Not analysed yet 8 Jan 2021
CVE-2020-4544 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
- IBM Engineering Workflow Management
- IBM Rational Collaborative Lifecycle Management
Not analysed yet 8 Jan 2021
CVE-2020-4487 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
- IBM Engineering Lifecycle Optimization
- IBM Rational DOORS Next Generation
Not analysed yet 8 Jan 2021
CVE-2020-4546 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Engineering Workflow Management
- IBM Rational Team Concert
Not analysed yet 2 Sept 2020
CVE-2020-4522 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Quality Manager
Not analysed yet 2 Sept 2020
CVE-2020-4445 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Quality Manager
Not analysed yet 2 Sept 2020
CVE-2020-4542 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 4 Aug 2020
CVE-2020-4525 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 4 Aug 2020
CVE-2020-4410 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to.
- IBM Rational Rhapsody Design Manager
Not analysed yet 4 Aug 2020
CVE-2020-4396 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 4 Aug 2020
CVE-2019-4748 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Engineering Workflow Management
Not analysed yet 16 Jul 2020
CVE-2019-4457 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the syst…
- IBM Rational Rhapsody Design Manager
Not analysed yet 19 Feb 2020
CVE-2018-1694 CVE record

CVSS 5.9 Medium

IBM Rational Team Concert: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02…
- IBM Rational Team Concert
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Nov 2018
CVE-2018-1606 CVE record

CVSS 4.3 Medium

IBM Rational Team Concert: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through…
- IBM Rational Team Concert
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Nov 2018
CVE-2018-1394 CVE record

CVSS 5.4 Medium

Multiple IBM Rational products are vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Rational Rhapsody Design Manager
Not analysed yet 20 Aug 2018
CVE-2017-1753 CVE record

CVSS 5.4 Medium

Multiple IBM Rational products are vulnerable to HTML injection.
- IBM Rational DOORS Next Generation
- IBM Rational Rhapsody Design Manager
Not analysed yet 20 Aug 2018
CVE-2018-1587 CVE record

CVSS 4.3 Medium

IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…
- IBM Rational Software Architect Design Manager
- IBM Rational Rhapsody Design Manager
Not analysed yet 19 Jul 2018
CVE-2018-1585 CVE record

CVSS 5.4 Medium

IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…
- IBM Rational Software Architect Design Manager
- IBM Rational Rhapsody Design Manager
Not analysed yet 19 Jul 2018
CVE-2018-1536 CVE record

CVSS 5.4 Medium

IBM Rational Software Architect Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…
- IBM Rational Software Architect Design Manager
- IBM Rational Rhapsody Design Manager
Not analysed yet 19 Jul 2018
CVE-2018-1535 CVE record

CVSS 5.4 Medium

IBM Rational Rhapsody Design Manager: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM…
- IBM Rational Rhapsody Design Manager
- IBM Rational Software Architect Design Manager
Not analysed yet 19 Jul 2018
CVE-2018-1492 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session.
- IBM Rational Engineering Lifecycle Manager
- IBM Rational Software Architect Design Manager
Not analysed yet 10 Jul 2018
CVE-2018-1423 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational DOORS Next Generation
Not analysed yet 10 Jul 2018
CVE-2017-1559 CVE record

CVSS 3.1 Low

Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.
- IBM Rational Rhapsody Design Manager
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Jul 2018
CVE-2017-1509 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks.
- IBM Rational Rhapsody Design Manager
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Jul 2018
CVE-2017-1488 CVE record

CVSS 3.7 Low

An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.
- IBM Rational Engineering Lifecycle Manager
- IBM Rational DOORS Next Generation
Not analysed yet 6 Jul 2018
CVE-2017-1237 CVE record

CVSS 5.4 Medium

IBM Jazz based applications are vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational DOORS Next Generation
Not analysed yet 6 Jul 2018
CVE-2017-1734 CVE record

IBM Rational Engineering Lifecycle Manager: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…
- IBM Rational Engineering Lifecycle Manager
- IBM Rational Quality Manager
Not analysed yet 24 Apr 2018
CVE-2017-1725 CVE record

IBM Rational Quality Manager: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…
- IBM Rational Quality Manager
- IBM Rational Collaborative Lifecycle Management
Not analysed yet 24 Apr 2018
CVE-2017-1700 CVE record

IBM Rational Team Concert: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative…
- IBM Rational Team Concert
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 24 Apr 2018
CVE-2017-1462 CVE record

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 21 Feb 2018
CVE-2017-1287 CVE record

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- IBM Rational Rhapsody Design Manager
Not analysed yet 24 Jul 2017
CVE-2017-1249 CVE record

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 24 Jul 2017
CVE-2017-1245 CVE record

IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 24 Jul 2017
CVE-2016-8975 CVE record

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
Not analysed yet 24 Jul 2017
CVE-2016-9698 CVE record

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.
- IBM Rational Rhapsody Design Manager
Not analysed yet 8 Jun 2017