EUVD-2016-9799

Malware in sbrugna...

EUVD-2016-10499

Malware in sbrugna...

EUVD-2016-10498

Malware in sbrugna...

Security Bulletin: Cross-site scripting vulnerability affects Rational Rhapsody Design Manager

Summary IBM Rhapsody Design Manager is affected by a cross-site scripting vulnerability. Vulnerability Details CVEID: CVE-2017-1462 DESCRIPTION: IBM Rhapsody DM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th...

Security Bulletin: Cross-site Scripting vulnerabilities affect IBM Rational products based on IBM Jazz technology

Summary Potential Cross-site scripting vulnerabilities affect the following IBM Rational Products: Rational Engineering Lifecycle Manager RELM, Rational Rhapsody Design Manager Rhapsody DM Vulnerability Details CVEID: CVE-2016-8975 DESCRIPTION: IBM Rhapsody DM and IBM Rational Engineering Lifecyc...

PT-2018-12578

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 5.0 through 5.0.2 IBM Rhapsody DM versions 6.0 through 6.0.5 Description The issue allows a remote attacker to expose sensitive information or consume memory resources through a XML External Entity Injection XXE attack...

CVE-2018-1456: Improper Restriction of XML External Entity Reference

IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091...

CVE-2017-1462

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461...

PT-2018-5689

Name of the Vulnerable Software and Affected Versions: IBM Rhapsody DM versions 5.0 through 6.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1462: Improper Neutralization of Input During Web Page Generation

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461...

CVE-2017-1240: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359...

PT-2017-12540

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM affected versions not specified Description The issue could lead to the disclosure of sensitive information through HTTP 500 Internal Server Error responses. Recommendations At the moment, there is no information about a newer...

CVE-2017-1287

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

PT-2017-12569

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2016-8975: Improper Neutralization of Input During Web Page Generation

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

CVE-2017-1249: Improper Neutralization of Input During Web Page Generation

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2017-9910

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1287: URL Redirection to Untrusted Site

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

PT-2017-12739

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 5.0 through 6.0 Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker could exploit this to...

CVE-2016-9698: Improper Restriction of XML External Entity Reference

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference...