Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Rhapsody Design Manager (f8aab96c-4605-5f26-9e3b-4858c5da9f64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1456 vulnerable 2026-06-08 05:11:18.238770 Details available
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091.
Published: 2018-06-06T17:00:00.000Z
Updated: 2024-08-05T03:59:39.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1602 vulnerable 2026-06-08 05:09:22.697581 Details available
MEDIUM (4.3)
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
Published: 2018-03-23T19:00:00.000Z
Updated: 2024-09-16T22:41:23.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1524 vulnerable 2026-06-08 05:09:22.524619 Details available
MEDIUM (4.3)
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.
Published: 2018-03-23T19:00:00.000Z
Updated: 2024-09-16T18:08:30.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1462 vulnerable 2026-06-08 05:09:22.227184 Details available
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461.
Published: 2018-02-21T21:00:00.000Z
Updated: 2024-09-17T01:07:09.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9700 vulnerable 2026-06-08 05:08:24.299508 Details available
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Published: 2017-07-05T18:00:00.000Z
Updated: 2024-09-16T23:22:03.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3014 vulnerable 2026-06-08 05:07:44.023879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2987 vulnerable 2026-06-08 05:07:43.984976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2947 vulnerable 2026-06-08 05:07:43.827737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2926 vulnerable 2026-06-08 05:07:43.733566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2864 vulnerable 2026-06-08 05:07:43.559549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0372 vulnerable 2026-06-08 05:07:15.116579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0284 vulnerable 2026-06-08 05:07:14.869324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0273 vulnerable 2026-06-08 05:07:14.814099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7449 vulnerable 2026-06-08 05:07:01.048898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.