Login Request a demo
RR
Product
Rational Rhapsody Design Manager
by IBM · last CVE Oct 27, 2021
106
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities106In the news0Timeline
Severity mix
Critical 0High 7Medium 90Low 6
Severity
All severities106Critical0High7Medium90Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rational Rhapsody Design Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29844
8.8
1%
Oct 27
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
Affected: All versions, or not specified
CVE-2016-9698
8.1
2%
Jun 8
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0.2; 4.0; 4.0.1; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-9707
8.1
2%
Mar 31
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-8974
8.1
1%
Feb 23
IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2015-7440
7.8
0%
Mar 15
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2019-4252
7.5
3%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
Affected: 6.0 through 6.0.6.1
CVE-2018-1456
7.1
2%
Jun 6
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; 6.0.2; +3 more
CVE-2018-1492
6.8
0%
Jul 10
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous…
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2015-1928
6.8
1%
Jan 2
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;…
Affected: 3.0; 3.0.0.1; 3.0.1; 4.0; 4.0.1; 4.0.2; +9 more
CVE-2019-4457
6.5
1%
Feb 19
IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further…
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more
CVE-2018-1423
6.5
1%
Jul 10
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2017-1700
6.5
1%
Apr 24
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle…
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2016-0219
6.5
1%
Jan 16
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more
CVE-2015-7453
6.1
1%
Mar 15
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before…
Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2018-1694
5.9
2%
Nov 6
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through…
Affected: 5.0; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; +4 more
CVE-2021-20357
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4865
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4855
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4547
5.4
1%
Jan 27
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4524
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4733
5.4
1%
Jan 8
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0; 7.0.1
CVE-2020-4697
5.4
1%
Jan 8
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0; 7.0.1
CVE-2020-4691
5.4
1%
Jan 8
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0; 7.0.1
CVE-2020-4546
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2020-4522
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2020-4445
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2020-4542
5.4
1%
Aug 4
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 7.0
CVE-2020-4525
5.4
1%
Aug 4
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 7.0
CVE-2020-4396
5.4
1%
Aug 4
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 7.0
CVE-2019-4748
5.4
1%
Jul 16
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4250
5.4
1%
Jun 27
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2019-4249
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2019-4083
5.4
1%
Jun 27
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1893
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1892
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1828
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1827
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1826
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1760
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1758
5.4
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-1952
5.4
1%
Mar 14
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting
Affected: 5.0 through 6.0.6
CVE-2018-1916
5.4
1%
Mar 14
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting
Affected: 5.0 through 6.0.6
CVE-2018-1688
5.4
1%
Mar 14
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting
Affected: 5.0 through 6.0.6
CVE-2018-1762
5.4
1%
Nov 29
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting
Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2018-1558
5.4
1%
Oct 2
IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting
Affected: 5.0 through 5.0.2; 6.0 through 6.0.6
CVE-2018-1394
5.4
1%
Aug 20
Multiple IBM Rational products are vulnerable to cross-site scripting
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2017-1753
5.4
1%
Aug 20
Multiple IBM Rational products are vulnerable to HTML injection
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2018-1585
5.4
1%
Jul 19
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are…
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2018-1535
5.4
1%
Jul 19
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are…
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2018-1536
5.4
1%
Jul 19
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are…
Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more
Page 1 of 3 · 106 total
123