RS
Product
Rational Software Architect Design Manager
81
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 63Low 5
Watch
Add Rational Software Architect Design Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9707 | 8.1 | Mar 31 | IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2015-7440 | 7.8 | Mar 15 | IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;… Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2019-4252 | 7.5 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system Affected: 6.0 through 6.0.1 |
| CVE-2018-1456 | 7.1 | Jun 6 | IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2018-1492 | 6.8 | Jul 10 | IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2015-1928 | 6.8 | Jan 2 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;… Affected: 3.0; 3.0.0.1; 3.0.1; 4.0; 4.0.1; 4.0.2; +8 more |
| CVE-2018-1423 | 6.5 | Jul 10 | IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2017-1700 | 6.5 | Apr 24 | IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2016-0219 | 6.5 | Jan 16 | XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2015-7453 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2018-1694 | 5.9 | Nov 6 | IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through… Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.1 |
| CVE-2019-4250 | 5.4 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2019-4249 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2019-4083 | 5.4 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1893 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1892 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1828 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1827 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1826 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1760 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1758 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.1 |
| CVE-2018-1952 | 5.4 | Mar 14 | IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting Affected: 5.0 through 6.0.1 |
| CVE-2018-1916 | 5.4 | Mar 14 | IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting Affected: 5.0 through 6.0.1 |
| CVE-2018-1688 | 5.4 | Mar 14 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting Affected: 5.0 through 6.0.1 |
| CVE-2018-1762 | 5.4 | Nov 29 | IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.1 |
| CVE-2018-1558 | 5.4 | Oct 2 | IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2018-1394 | 5.4 | Aug 20 | Multiple IBM Rational products are vulnerable to cross-site scripting Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1 |
| CVE-2017-1753 | 5.4 | Aug 20 | Multiple IBM Rational products are vulnerable to HTML injection Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1 |
| CVE-2018-1585 | 5.4 | Jul 19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2018-1536 | 5.4 | Jul 19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2018-1535 | 5.4 | Jul 19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |
| CVE-2017-1237 | 5.4 | Jul 6 | IBM Jazz based applications are vulnerable to cross-site scripting Affected: 5.0.1; 6.0.0; 6.0.1 |
| CVE-2017-1762 | 5.4 | Mar 23 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting Affected: 4.0 through 4.0.7; 5.0 through 5.0.2; after 6.0 through 6.0.1 |
| CVE-2017-1655 | 5.4 | Mar 23 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting Affected: 4.0 through 4.0.7; 5.0 through 5.0.2; after 6.0 through 6.0.1 |
| CVE-2017-1629 | 5.4 | Mar 23 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting Affected: 4.0 through 4.0.7; 5.0 through 5.0.2; after 6.0 through 6.0.1 |
| CVE-2017-1653 | 5.4 | Jan 26 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting Affected: 6.0; 6.0.1 |
| CVE-2017-1365 | 5.4 | Dec 27 | IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting Affected: 4.0.0 through 4.0.7; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2017-1245 | 5.4 | Jul 24 | IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; 6.0.2 |
| CVE-2016-9973 | 5.4 | Jun 13 | IBM Jazz Foundation is vulnerable to cross-site scripting Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2016-3014 | 5.4 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2016-2926 | 5.4 | Nov 25 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2016-2864 | 5.4 | Nov 24 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2016-0284 | 5.4 | Nov 24 | The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2016-0273 | 5.4 | Nov 24 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2017-1488 | 5.3 | Jul 6 | An undisclosed vulnerability in Jazz common products exists with potential for information disclosure Affected: 5.0.1; 6.0.0; 6.0.1 |
| CVE-2015-7471 | 4.8 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2019-4084 | 4.3 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM… Affected: 6.0 through 6.0.1 |
| CVE-2018-1734 | 4.3 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further… Affected: 6.0 through 6.0.1 |
| CVE-2018-1606 | 4.3 | Nov 6 | IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0… Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.1 |
| CVE-2018-1587 | 4.3 | Jul 19 | IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could… Affected: 5.0 through 5.0.2; 6.0 through 6.0.1 |