CVE-2016-9696

Published: Mar 20, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960.

Affected (14)

Products: Ibm: Rational Rhapsody Design Manager

Ibm

1 product

Rational Rhapsody Design Manager

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Rhapsody Design Manager	Version 4.0.1
Ibm Rational Rhapsody Design Manager	Version 4.0.2
Ibm Rational Rhapsody Design Manager	Version 4.0.3
Ibm Rational Rhapsody Design Manager	Version 4.0.4
Ibm Rational Rhapsody Design Manager	Version 4.0.5
Ibm Rational Rhapsody Design Manager	Version 4.0.6
Ibm Rational Rhapsody Design Manager	Version 4.0.7
Ibm Rational Rhapsody Design Manager	Version 4.0
Ibm Rational Rhapsody Design Manager	Version 5.0.1
Ibm Rational Rhapsody Design Manager	Version 5.0.2
Ibm Rational Rhapsody Design Manager	Version 5.0
Ibm Rational Rhapsody Design Manager	Version 6.0.1
Ibm Rational Rhapsody Design Manager	Version 6.0.2
Ibm Rational Rhapsody Design Manager	Version 6.0