7.5
CVSSv2

CVE-2016-9698

Published: 08/06/2017 Updated: 14/06/2017
CVSS v2 Base Score: 7.5 | Impact Score: 7.8 | Exploitability Score: 8
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 668
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:C

Vulnerability Summary

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1999960.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm rational rhapsody design manager 4.0.5

ibm rational rhapsody design manager 4.0.6

ibm rational rhapsody design manager 4.0.7

ibm rational rhapsody design manager 5.0

ibm rational rhapsody design manager 4.0.1

ibm rational rhapsody design manager 4.0.3

ibm rational rhapsody design manager 5.0.2

ibm rational rhapsody design manager 6.0.1

ibm rational rhapsody design manager 4.0

ibm rational rhapsody design manager 6.0.2

ibm rational rhapsody design manager 4.0.2

ibm rational rhapsody design manager 4.0.4

ibm rational rhapsody design manager 5.0.1

ibm rational rhapsody design manager 6.0