CVE-2018-1535

Published: Jul 19, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.

Affected (4)

Products: Ibm: Rational Rhapsody Design Manager, Rational Software Architect Design Manager

Ibm

2 products

Rational Rhapsody Design Manager

Rational Software Architect Design Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Rhapsody Design Manager	From 5.0 to 5.0.2
Ibm Rational Rhapsody Design Manager	From 6.0 to 6.0.5
Ibm Rational Software Architect Design Manager	From 5.0 to 5.0.2
Ibm Rational Software Architect Design Manager	From 6.0 to 6.0.1