Known vulnerabilities in IBM Engineering Systems Design Rhapsody
Vendor:
IBM Corporation
Software:
IBM Engineering Systems Design Rhapsody
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_engineering_systems_design_rhapsody:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
53
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.0.1.0.6
10.0.0.4
10.0.2.0.3
10.0.0.5
10.0.1.0.5
10.0.2.0.4
10.0.2
10.0.2.0.1
10.0.2.0.2
10.0.1.0.4
10.0.0.3
9.0.2.0.5
10.0.1
10.0.1.0.1
10.0.1.0.2
9.0.2.0.3
10.0.1.0.3
10.0.1.0
10.0.1.1
10.0
9.0.2.0.0
9.0.2.0.1
10.0.1.2
10.0.0.2
9.0.2.0.4
7.0.3.0.8
7.0.2.0.31
10.0.0.1
9.0.2.0.2
9.0.1.0.6
9.0.1.0.5
6.0.6
7.0.1
7.0.2
6.0.6.1
7.0
9.0.1
9.0
8.4
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123577 - Missing release of memory after effective lifetime CVE-2026-1605 |
CWE-401 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 05.03.2026 |
SB2026030559 SB2026050522 SB2026061616 and 4 more |
||
| #VU123576 - Improper input validation CVE-2025-11143 |
CWE-20 | Low | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 05.03.2026 |
SB2026030558 SB2026040716 SB2026042070 and 12 more |
||
| #VU121727 - Improper input validation CVE-2026-21945 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 96 more |
||
| #VU121728 - Improper input validation CVE-2026-21932 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 77 more |
||
| #VU121729 - Improper input validation CVE-2026-21933 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 90 more |
||
| #VU121730 - Out-of-bounds read CVE-2026-21925 |
CWE-125 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 92 more |
||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 10.0.0.5, 10.0.1.0.6, 10.0.2.0.4 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 101 more |
||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | 9.0.2.0.5, 10.0.0.3, 10.0.1.0.4, 10.0.2.0.2 | 04.08.2025 |
SB2025080422 SB2025080423 SB2025080427 and 180 more |
||
| #VU113213 - Stack-based buffer overflow CVE-2025-33076 |
CWE-121 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.0.3 | 25.07.2025 |
SB2025072510 |
||
| #VU113211 - Use of Potentially Dangerous Function CVE-2024-38434 |
CWE-676 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.0.3 | 25.07.2025 |
SB2025072508 SB2025072509 |
||
| #VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763 |
CWE-918 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.2 | 14.10.2024 |
SB20241014107 SB2024112849 SB2024120517 and 49 more |
||
| #VU98418 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-41779 |
CWE-362 | High | 7.0.2.0.31, 7.0.3.0.8 | 11.10.2024 |
SB2024101146 SB2025012413 |
||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.2 | 03.10.2024 |
SB2024100352 SB2024100421 SB2024101007 and 132 more |
||
| #VU94058 - Improper Link Resolution Before File Access ('Link Following') CVE-2024-38081 |
CWE-59 | Low | 9.0.2.0.4, 10.0.0.2, 10.0.1.2 | 10.07.2024 |
SB2024071013 SB2025060327 |
||
| #VU80908 - Resource Management Errors CVE-2015-5262 |
CWE-399 | Medium | 9.0.1.0.6, 9.0.2.0.2, 10.0.0.1 | 20.09.2023 |
SB2023092013 SB2023092037 SB2023092123 and 11 more |
||
| #VU80741 - Improper Certificate Validation CVE-2012-5783 |
CWE-295 | Medium | 9.0.1.0.6, 9.0.2.0.2, 10.0.0.1 | 13.09.2023 |
SB2023091335 SB2023091521 SB2023092013 and 20 more |
||
| #VU75476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22665 |
CWE-79 | Low | 9.0.1.0.6, 9.0.2.0.2 | 25.04.2023 |
SB2023042529 SB2023070408 SB2023100531 and 1 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 9.0.1.0.6, 9.0.2.0.2, 10.0.0.1 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425 |
CWE-22 | Low | 9.0.1.0.6, 9.0.2.0.2, 10.0.0.1 | 15.04.2021 |
SB2021041510 SB2021081922 SB2021093016 and 121 more |
||
| #VU50139 - Incorrect Default Permissions CVE-2020-8908 |
CWE-276 | Low | 9.0.1.0.6, 9.0.2.0.2 | 11.12.2020 |
SB2020121114 SB2021031707 SB2021042104 and 62 more |
Showing elements 1 - 20 out of 53