Code injection

Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive...

CVE-2014-0948

The CVE-2014-0948 entry affects IBM Rational Software Architect Design Manager and IBM Rhapsody Design Manager (RSA/RDM) 3.x and 4.x up to 4.0.7. Affects remote authenticated users who can upload a crafted ZIP archive, enabling arbitrary code execution on the vulnerable system. The vulnerability ...

CVE-2014-0947

CVE-2014-0947 corresponds to an unspecified vulnerability in IBM Rational Software Architect Design Manager 4.0.6 that could allow remote authenticated users to execute arbitrary code through a crafted update site. Related sources describe a broader issue affecting Rational Engineering Lifecycle ...

CVE-2014-0947

Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update site...

CVE-2013-5459

Unspecified vulnerability in IBM Rational Software Architect RSA Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated users to modify data by leveraging improper parameter checking...

CVE-2013-5459

CVE-2013-5459 affects IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager (RSA/RDM) with Design Manager versions 3.x up to 3.0.1 and 4.x before 4.0.6. The root cause is improper parameter checking, allowing remote authenticated users to modify data (data integrity ...

CVE-2013-3042

Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files...

Directory traversal

Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files...

Directory traversal

Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files...

CVE-2013-3043

CVE-2013-3043 concerns a directory-traversal vulnerability in the client components of IBM Rational Software Architect Design Manager and Rhapsody Design Manager (3.x and 4.x) prior to 4.0.5. The issue allows local users to read arbitrary files via vectors involving temporary files. The main impa...

CVE-2013-3042

IBM Rational Software Architect Design Manager and Rhapsody Design Manager (3.x and 4.x) are affected by a directory traversal vulnerability in the server, allowing local users to read arbitrary files via vectors involving temporary files. The issue is rooted in the server component prior to vers...

CVE-2009-4052

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

CVE-2009-4052

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

CVE-2009-4052

IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 contain multiple XSS vulnerabilities in the JSF Widget Library Runtime. The issues allow remote attackers to inject arbitrary web script or HTML via vectors involving the JSF ...