Security Bulletin: IBM Rhapsody Systems Engineering is vulnerable to prototype pollution abuse

Summary A security vulnerability was identified in the axios package used in IBM Rhapsody Systems Engineering. The issue has been resolved and patched. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and...

Security Bulletin: IBM Rhapsody Systems Engineering is using qs-6.14.0 which is vulnerable to CVE-2025-15284

Summary A security vulnerability was identified in the QS package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Vulnerability Details CVEID:CVE-2025-15284 DESCRIPTION: Improper...

Security Bulletin: IBM Rhapsody Systems Engineering is using @modelcontextprotocol/sdk-1.15.0 which is vulnerable to CVE-2026-0621

Summary A security vulnerability was identified in the @modelcontextprotocol/sdk package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Vulnerability Details CVEID:CVE-2026-0621...

EUVD-2017-10478

Malware in sbrugna...

EUVD-2016-10498

Malware in sbrugna...

EUVD-2016-10499

Malware in sbrugna...

EUVD-2017-10265

Malware in sbrugna...

EUVD-2017-10303

Malware in sbrugna...

EUVD-2016-9800

Malware in sbrugna...

EUVD-2018-12035

Malware in sbrugna...

EUVD-2016-9798

Malware in sbrugna...

EUVD-2018-12269

Malware in sbrugna...

EUVD-2017-10256

Malware in sbrugna...

EUVD-2016-10495

Malware in sbrugna...

EUVD-2016-9799

Malware in sbrugna...

EUVD-2016-10497

Malware in sbrugna...

CVE-2025-33020

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information...

CVE-2025-33076

CVE-2025-33076 affects IBM Engineering Systems Design Rhapsody, specifically versions 9.0.2, 10.0, and 10.0.1. The vulnerability is a stack-based buffer overflow caused by improper bounds checking, allowing a local user to overflow a buffer and execute arbitrary code. The IBM Security Bulletin co...

PT-2025-30591 · Ibm · Engineering Systems Design Rhapsody

Name of the Vulnerable Software and Affected Versions: IBM Engineering Systems Design Rhapsody versions 9.0.2, 10.0, and 10.0.1 Description: IBM Engineering Systems Design Rhapsody is susceptible to a stack-based buffer overflow due to insufficient bounds checking. A local user can exploit this...

Security Bulletin: IBM Rhapsody Systems Engineering is using next-14.2.15.tgz which is vulnerable to CVE-2024-56332

Summary A security vulnerability was identified in the Next.js package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Following IBM® Engineering Lifecycle Engineering product is...