CVE-2016-9698

IBM Rhapsody DM is affected by CVE-2016-9698 due to an XML External Entity (XXE) processing flaw that can lead to denial of service and potential memory/resource exhaustion. Affected: Rational Software Architect/Design Manager versions 4.0.0–4.0.7, 5.0.0–5.0.2, and 6.0.0–6.0.2. Root cause: XXE in...

CVE-2016-8973

IBM Rhapsody Design Manager (RDM) versions 4.0–6.0 are affected by an undisclosed vulnerability that may allow an authenticated user to upload infected files to the server. The issue, tracked as CVE-2016-8973, has a CVSSv3 base score of 4.3 (Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). ...