Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0:*:*:*:*:*:*:*

part: a version: 6.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Rhapsody Design Manager (f8aab96c-4605-5f26-9e3b-4858c5da9f64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1456 vulnerable 2026-06-08 05:11:18.240923 Details available
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091.
Published: 2018-06-06T17:00:00.000Z
Updated: 2024-08-05T03:59:39.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1462 vulnerable 2026-06-08 05:09:22.228512 Details available
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461.
Published: 2018-02-21T21:00:00.000Z
Updated: 2024-09-17T01:07:09.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9700 vulnerable 2026-06-08 05:08:24.300737 Details available
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Published: 2017-07-05T18:00:00.000Z
Updated: 2024-09-16T23:22:03.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2987 vulnerable 2026-06-08 05:07:43.986023 Details available
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:14.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2986 vulnerable 2026-06-08 05:07:43.968396 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6.0.1 iFix6, Rational DOORS Next Generation 6.x before 6.0.1 iFix6, Rational Engineering Lifecycle Manager 6.x before 6.0.1 iFix6, and Rational Rhapsody Design Manager 6.x before 6.0.1 iFix6 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-11-25T03:38:00.000Z
Updated: 2024-08-05T23:40:14.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2947 vulnerable 2026-06-08 05:07:43.827790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2926 vulnerable 2026-06-08 05:07:43.733617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2864 vulnerable 2026-06-08 05:07:43.561237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0372 vulnerable 2026-06-08 05:07:15.116630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0284 vulnerable 2026-06-08 05:07:14.869373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0273 vulnerable 2026-06-08 05:07:14.814973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7449 vulnerable 2026-06-08 05:07:01.049804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.