Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductRational Rhapsody Design Manager (d0a45168-e297-5d23-8e22-3659239af4d0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9697 vulnerable 2026-06-08 05:08:24.244549 Details available
An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed between the server and the browser. IBM Reference #: 1999960.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-06T02:59:03.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9696 vulnerable 2026-06-08 05:08:24.243921 Details available
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-06T02:59:03.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9694 vulnerable 2026-06-08 05:08:24.243232 Details available
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999960.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-06T02:59:03.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8974 vulnerable 2026-06-08 05:08:22.345992 Details available
IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997798.
Published: 2017-02-23T16:00:00.000Z
Updated: 2024-08-06T02:35:02.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8973 vulnerable 2026-06-08 05:08:22.337669 Details available
IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference #: 1999960.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-06T02:35:02.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.