IBM Rhapsody Model Manager
By the Year
In 2024 there have been 0 vulnerabilities in IBM Rhapsody Model Manager . Rhapsody Model Manager did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 14 | 5.31 |
| 2020 | 0 | 0.00 |
| 2019 | 8 | 5.26 |
| 2018 | 1 | 5.40 |
It may take a day or so for new Rhapsody Model Manager vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Rhapsody Model Manager Security Vulnerabilities
IBM Jazz Team Server products are vulnerable to cross-site scripting
CVE-2021-20519
5.4 - Medium
- April 12, 2021
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
XSS
IBM Jazz Team Server products use weaker than expected cryptographic algorithms
CVE-2020-4965
7.5 - High
- April 12, 2021
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
Use of a Broken or Risky Cryptographic Algorithm
IBM Jazz Team Server products contain an undisclosed vulnerability
CVE-2020-4964
4.3 - Medium
- April 12, 2021
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
IBM Jazz Team Server products are vulnerable to stored cross-site scripting
CVE-2020-4920
5.4 - Medium
- April 12, 2021
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
XSS
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2020-4524
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434.
XSS
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim
CVE-2020-4547
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.
Clickjacking
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2021-20357
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
XSS
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2020-4855
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457.
XSS
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2020-4865
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.
XSS
IBM Jazz Foundation Products could
CVE-2020-4487
4.3 - Medium
- January 08, 2021
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.
Generation of Error Message Containing Sensitive Information
IBM Jazz Foundation products are vulnerable to cross-site scripting
CVE-2020-4733
5.4 - Medium
- January 08, 2021
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127.
XSS
IBM Jazz Foundation products are vulnerable to cross-site scripting
CVE-2020-4697
5.4 - Medium
- January 08, 2021
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2020-4691
5.4 - Medium
- January 08, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698.
XSS
IBM Jazz Foundation Products could
CVE-2020-4544
4.3 - Medium
- January 08, 2021
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.
Generation of Error Message Containing Sensitive Information
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1893
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152157.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1892
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152156.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1828
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150431.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1827
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150430.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1826
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150429.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1760
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148614.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
CVE-2018-1758
5.4 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148605.
XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages
CVE-2018-1734
4.3 - Medium
- June 27, 2019
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838.
Information Disclosure
IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting
CVE-2018-1690
5.4 - Medium
- August 07, 2018
IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145510.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Rhapsody Model Manager or by IBM? Click the Watch button to subscribe.
