Ibm Rational Rhapsody Design Manager vulnerabilities
105 known vulnerabilities affecting ibm/rational_rhapsody_design_manager.
Total CVEs
105
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH6MEDIUM93LOW6
Vulnerabilities
Page 5 of 6
CVE-2017-1725P4MEDIUMCVSS 4.3≥ 5.0, ≤ 5.0.2≥ 6.0, ≤ 6.0.5+9 more2018-04-24
CVE-2017-1725 [MEDIUM] CWE-200 CVE-2017-1725: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain
nvd
CVE-2017-1559P4MEDIUMCVSS 4.3≥ 6.0.0, ≤ 6.0.5v5.0.1+7 more2018-07-06
CVE-2017-1559 [MEDIUM] CWE-200 CVE-2017-1559: Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts v
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.
nvd
CVE-2017-1191P4MEDIUMCVSS 4.3≥ 4.0.0, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2+1 more2017-12-27
CVE-2017-1191 [MEDIUM] CVE-2017-1191: An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Man
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
nvd
CVE-2016-8973P4MEDIUMCVSS 4.3v4.0v4.0.1+12 more2017-03-20
CVE-2016-8973 [MEDIUM] CWE-434 CVE-2016-8973: IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticat
IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference #: 1999960.
nvd
CVE-2018-1606P4MEDIUMCVSS 4.3≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.6+10 more2018-11-06
CVE-2018-1606 [MEDIUM] CWE-200 CVE-2018-1606: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Ratio
nvd
CVE-2017-1734P4MEDIUMCVSS 4.3≥ 5.0, ≤ 5.0.2≥ 6.0, ≤ 6.0.5+9 more2018-04-24
CVE-2017-1734 [MEDIUM] CWE-200 CVE-2017-1734: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores
nvd
CVE-2017-1570P4MEDIUMCVSS 4.3v4.0v4.0.1+14 more2017-11-27
CVE-2017-1570 [MEDIUM] CWE-200 CVE-2017-1570: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.
nvd
CVE-2016-2987P4MEDIUMCVSS 4.3v4.0v4.0.1+14 more2017-02-01
CVE-2016-2987 [MEDIUM] CWE-200 CVE-2016-2987: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.
nvd
CVE-2017-1251P4MEDIUMCVSS 4.3v4.0v4.0.1+14 more2017-11-27
CVE-2017-1251 [MEDIUM] CWE-200 CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
nvd
CVE-2019-4084P4MEDIUMCVSS 4.3≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2019-4084 [MEDIUM] CVE-2019-4084: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) c
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
nvd
CVE-2020-4487P4MEDIUMCVSS 4.3v6.0.2v6.0.6+3 more2021-01-08
CVE-2020-4487 [MEDIUM] CWE-209 CVE-2020-4487: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.
nvd
CVE-2020-4544P4MEDIUMCVSS 4.3v6.0.2v6.0.6+3 more2021-01-08
CVE-2020-4544 [MEDIUM] CWE-209 CVE-2020-4544: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.
nvd
CVE-2017-1509P4MEDIUMCVSS 4.3≥ 6.0.0, ≤ 6.0.5v5.0.1+7 more2018-07-06
CVE-2017-1509 [MEDIUM] CWE-200 CVE-2017-1509: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719.
nvd
CVE-2017-1240P4MEDIUMCVSS 4.3v4.0v4.0.1+14 more2017-11-27
CVE-2017-1240 [MEDIUM] CWE-200 CVE-2017-1240: IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error respon
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
nvd
CVE-2017-1507P4MEDIUMCVSS 4.3v4.0v4.0.1+14 more2017-12-11
CVE-2017-1507 [MEDIUM] CWE-200 CVE-2017-1507: IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to f
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
nvd
CVE-2016-9735P4MEDIUMCVSS 4.3v4.0v4.0.1+13 more2017-05-15
CVE-2016-9735 [MEDIUM] CWE-200 CVE-2016-9735: IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack tra
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
nvd
CVE-2018-1734P4MEDIUMCVSS 4.3≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2018-1734 [MEDIUM] CWE-200 CVE-2018-1734: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838.
nvd
CVE-2015-1971P4MEDIUMCVSS 4.3v3.0v3.0.0.1+13 more2016-01-03
CVE-2015-1971 [MEDIUM] CVE-2015-1971: Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifec
Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Team Concert (RTC) 2.x and 3.x before 3.0.1.6 IF7, 4.x before
nvd
CVE-2016-9700P4MEDIUMCVSS 4.3v4.0v4.0.1+15 more2017-07-05
CVE-2016-9700 [MEDIUM] CWE-200 CVE-2016-9700: IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
nvd
CVE-2016-0372P4LOWCVSS 3.7v4.0v4.0.1+12 more2016-11-24
CVE-2016-0372 [LOW] CWE-200 CVE-2016-0372: IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 b
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0
nvd