Ibm Rational Rhapsody Design Manager vulnerabilities, page 5

106 vulnerabilities

Known vulnerabilities in Ibm Rational Rhapsody Design Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4MediumCVE-2017-1237ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124355.EPSS0.66%4.3MediumCVE-2017-1725ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820.EPSS0.95%6.5MediumCVE-2017-1700ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) could allow an authenticated user to cause a denial of service due to incorrect authorization for resource intensive scenarios. IBM X-Force ID: 134392.EPSS1.12%4.3MediumCVE-2017-1570ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.EPSS0.92%4.3MediumCVE-2017-1734ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.EPSS0.95%5.3MediumCVE-2017-1488ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementAn undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627.EPSS1.18%4.3MediumCVE-2017-1524ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.EPSS1.78%5.4MediumCVE-2017-1629ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127.EPSS0.93%5.4MediumCVE-2017-1287ibm · rational_rhapsody_design_manager +1 moreibm rational_rhapsody_design_managerIBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.EPSS0.56%5.4MediumCVE-2017-1653ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133268.EPSS1.31%5.4MediumCVE-2017-1655ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379.EPSS0.93%4.3MediumCVE-2017-1191ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementAn undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.EPSS0.74%5.4MediumCVE-2017-1245ibm · rational_rhapsody_design_manager +1 moreibm rational_rhapsody_design_managerIBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124580.EPSS0.54%4.3MediumCVE-2017-1099ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.EPSS3.43%5.4MediumCVE-2017-1762ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006.EPSS0.93%4.3MediumCVE-2017-1240ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.EPSS0.92%4.3MediumCVE-2017-1507ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.EPSS0.74%5.4MediumCVE-2017-1365ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858.EPSS0.54%4.3MediumCVE-2017-1559ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementMultiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.EPSS0.89%4.3MediumCVE-2019-4084ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.EPSS0.98%