RS
Product
Rational Software Architect Design Manager
81
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 63Low 5
Watch
Add Rational Software Architect Design Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1602 | 4.3 | Mar 23 | IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially… Affected: 4.0.0 through 4.0.7; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2017-1524 | 4.3 | Mar 23 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP… Affected: 4.0.0 through 4.0.7; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2017-1191 | 4.3 | Dec 27 | An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access Affected: 4.0.0 through 4.0.7; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2017-1507 | 4.3 | Dec 11 | IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2017-1570 | 4.3 | Nov 27 | IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2017-1251 | 4.3 | Nov 27 | An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2017-1240 | 4.3 | Nov 27 | IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2016-6024 | 4.3 | Nov 27 | IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2016-9700 | 4.3 | Jul 5 | IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces Affected: 4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2017-1099 | 4.3 | Jun 13 | IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2016-9735 | 4.3 | May 15 | IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2016-2987 | 4.3 | Feb 1 | An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker Affected: 4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +10 more |
| CVE-2015-1971 | 4.3 | Jan 3 | Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10;… Affected: 3.0; 3.0.0.1; 3.0.1; 4.0; 4.0.1; 4.0.2; +8 more |