IBM Rational Rhapsody Design Manager Information Disclosure Vulnerability (CNVD-2017-38260)

IBM Rational Rhapsody Design Manager is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models as well as automated software design reviews. An informati...

IBM Rational Software Architect Design Manager Information Disclosure Vulnerability

IBM Rational Software Architect RSA Design Manager is a collaborative software design and development platform from IBM based on Jazz technology. The platform supports storing, sharing, and managing software designs and models in a centralized location.CLM Applications is one of the lifecycle...

IBM Rhapsody DM Redirection Vulnerability

IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A security...

IBM Rhapsody DM Cross-Site Scripting Vulnerability

IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A cross-site...

IBM Rational Software Architect Design Manager Cross-Site Scripting Vulnerability

IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A cross-site...

IBM Rhapsody DM Cross-Site Scripting Vulnerability (CNVD-2017-25759)

IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A cross-site...

CVE-2016-8975

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

CVE-2017-1245

IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2017-1245

IBM Rational Software Architect Design Manager 5.0–6.0 is vulnerable to cross-site scripting in the Web UI due to improper input sanitization. Affected products range 4.0.0–6.0.2; the CVE entry corresponds to CVE-2017-1245 with CVSSv3 base 5.4. Remediation/releases include upgrading to fixed iFix...

CVE-2017-1245: Improper Neutralization of Input During Web Page Generation

IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2017-12559

Name of the Vulnerable Software and Affected Versions IBM Rational Software Architect Design Manager versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

CVE-2016-9698

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference...

IBM Rational Rhapsody Design Manager XML External Entity Injection Vulnerability

IBM Rational Rhapsody Design Manager is a set of collaborative design management software from IBM in the United States. IBM Rational Rhapsody Design Manager suffers from an XML external entity injection vulnerability. A remote attacker could exploit this vulnerability to submit special XML data,...

IBM Rational Rhapsody Design Manager Information Disclosure Vulnerability

IBM Rational Rhapsody Design Manager is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models as well as automated software design reviews. A security...

IBM Rational Rhapsody Design Manager HTML Injection Vulnerability

IBM Rational Rhapsody Design Manager is a set of collaborative design management software from IBM in the United States. IBM Rational Rhapsody Design Manager suffers from an HTML injection vulnerability. The vulnerability allows remote attackers to inject malicious script or HTML code, which can ...

IBM Rational Rhapsody Design Manager Cross-Site Scripting Vulnerability

IBM Rational Rhapsody Design Manager is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models as well as automated software design reviews. A cross-site...

IBM Rational Rhapsody Design Manager Arbitrary File Upload Vulnerability

IBM Rational Rhapsody Design Manager is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models as well as automated software design reviews. An arbitrary...

Cross site scripting

Cross-site scripting XSS vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1description parameter aka "Design Manager Categories Category Description"...

CVE-2017-6555

Cross-site scripting XSS vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1description parameter aka "Design Manager Categories Category Description"...

IBM Rational Rhapsody Design Manager XML External Entity Injection Vulnerability

IBM Rational Rhapsody Design Manager is a Jazz-based platform from IBM that helps systems engineers apply Model-Based Systems Engineering MBSE through SysML to help embedded software developers dismantle engineering silos and collaborate with key stakeholders, such as managers, quality managers,...