Unscored severity · published Jul 30, 2014
CVE-2014-0948
Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Rational Software Architect Design Manager · Ibm
3.0.0; 3.0.0.1; 3.0.1; 4.0.0; 4.0.1; 4.0.2; +4 more · source: NVD
RD
Rhapsody Design Manager · Ibm
3.0.0; 3.0.0.1; 3.0.1; 4.0.0; 4.0.1; 4.0.2; +4 more · source: NVD
Affected product
RS
Rational Software Architect Design Manager
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0948
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0948
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21678323
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92621
More from Rational Software Architect Design Manager
8.1
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
7.8
CVE-2015-7440
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
7.5
CVE-2019-4252
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
7.1
CVE-2018-1456
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
6.8
CVE-2018-1492
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous…