Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm rhapsody design manager 4.0.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv3
CVE-2016-8973
IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference #: 1999960.
Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 6.0.2Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 5.0.1Ibm Rational Rhapsody Design Manager 5.0.2Ibm Rational Rhapsody Design Manager 6.0Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 6.0.1
8.1
CVSSv3
CVE-2016-8974
IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resour...
Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 5.0.1Ibm Rational Rhapsody Design Manager 6.0Ibm Rational Rhapsody Design Manager 6.0.1Ibm Rational Rhapsody Design Manager 6.0.2Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 5.0.2
5.4
CVSSv3
CVE-2016-9694
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference...
Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 5.0.2Ibm Rational Rhapsody Design Manager 6.0.1Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 5.0.1Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 6.0Ibm Rational Rhapsody Design Manager 6.0.2
5.4
CVSSv3
CVE-2016-9696
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960.
Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 5.0.1Ibm Rational Rhapsody Design Manager 6.0Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 6.0.1Ibm Rational Rhapsody Design Manager 6.0.2Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 5.0.2
8.1
CVSSv3
CVE-2016-9698
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resou...
Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 5.0.2Ibm Rational Rhapsody Design Manager 6.0.1Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 6.0.2Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 5.0.1Ibm Rational Rhapsody Design Manager 6.0
3.1
CVSSv3
CVE-2016-9697
An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an malicious user to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed between the server and the browser. IBM Reference #: 1999960.
Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 4.0.6Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 5.0.2Ibm Rational Rhapsody Design Manager 6.0Ibm Rational Rhapsody Design Manager 6.0.1Ibm Rational Rhapsody Design Manager 6.0.2Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 4.0.7Ibm Rational Rhapsody Design Manager 5.0.1
NA
CVE-2013-5459
Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x up to and including 3.0.1 and 4.x prior to 4.0.6 allows remote authenticated users to modify data by leveraging improper parameter checking.
Ibm Rhapsody Design Manager 4.0.0Ibm Rhapsody Design Manager 4.0.1Ibm Rhapsody Design Manager 3.0.0Ibm Rhapsody Design Manager 4.0.4Ibm Rhapsody Design Manager 4.0.5Ibm Rhapsody Design Manager 3.0.0.1Ibm Rhapsody Design Manager 3.0.1Ibm Rhapsody Design Manager 4.0.2Ibm Rhapsody Design Manager 4.0.3Ibm Rational Software Architect Design Manager 3.0.1Ibm Rational Software Architect Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.3Ibm Rational Software Architect Design Manager 4.0.4Ibm Rational Software Architect Design Manager 3.0.0Ibm Rational Software Architect Design Manager 3.0.0.1Ibm Rational Software Architect Design Manager 4.0.5Ibm Rational Software Architect Design Manager 4.0.1Ibm Rational Software Architect Design Manager 4.0.2
NA
CVE-2013-3042
Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x prior to 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.
Ibm Rational Software Architect Design Manager 4.0.2Ibm Rational Software Architect Design Manager 3.0.0Ibm Rhapsody Design Manager 3.0.0Ibm Rhapsody Design Manager 3.0.0.1Ibm Rational Software Architect Design Manager 4.0.3Ibm Rational Software Architect Design Manager 4.0.4Ibm Rhapsody Design Manager 4.0.3Ibm Rhapsody Design Manager 4.0.4Ibm Rational Software Architect Design Manager 3.0.0.1Ibm Rational Software Architect Design Manager 3.0.1Ibm Rhapsody Design Manager 3.0.1Ibm Rhapsody Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.1Ibm Rhapsody Design Manager 4.0.1Ibm Rhapsody Design Manager 4.0.2
NA
CVE-2013-3043
Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x prior to 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.
Ibm Rational Software Architect Design Manager 3.0.0Ibm Rational Software Architect Design Manager 4.0.4Ibm Rhapsody Design Manager 3.0.0Ibm Rational Software Architect Design Manager 4.0.2Ibm Rational Software Architect Design Manager 4.0.3Ibm Rhapsody Design Manager 4.0.3Ibm Rhapsody Design Manager 4.0.4Ibm Rational Software Architect Design Manager 3.0.0.1Ibm Rational Software Architect Design Manager 3.0.1Ibm Rhapsody Design Manager 3.0.0.1Ibm Rhapsody Design Manager 3.0.1Ibm Rational Software Architect Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.1Ibm Rhapsody Design Manager 4.0.0Ibm Rhapsody Design Manager 4.0.1Ibm Rhapsody Design Manager 4.0.2
NA
CVE-2014-0948
Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x prior to 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.
Ibm Rhapsody Design Manager 4.0.6Ibm Rhapsody Design Manager 3.0.1Ibm Rhapsody Design Manager 3.0.0.1Ibm Rhapsody Design Manager 4.0.3Ibm Rhapsody Design Manager 4.0.2Ibm Rhapsody Design Manager 4.0.5Ibm Rhapsody Design Manager 4.0.4Ibm Rhapsody Design Manager 3.0.0Ibm Rhapsody Design Manager 4.0.1Ibm Rhapsody Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.1Ibm Rational Software Architect Design Manager 4.0.0Ibm Rational Software Architect Design Manager 4.0.6Ibm Rational Software Architect Design Manager 4.0.5Ibm Rational Software Architect Design Manager 4.0.4Ibm Rational Software Architect Design Manager 3.0.0Ibm Rational Software Architect Design Manager 3.0.1Ibm Rational Software Architect Design Manager 3.0.0.1Ibm Rational Software Architect Design Manager 4.0.3Ibm Rational Software Architect Design Manager 4.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook