Known vulnerabilities in IBM Engineering Systems Design Rhapsody
Vendor:
IBM Corporation
Software:
IBM Engineering Systems Design Rhapsody
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_engineering_systems_design_rhapsody:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
63
Public exploits:
4
Known exploited (KEV):
1
Breakdown by Severity Chart
10.0.3.0.2
10.0.2.0.5
10.0.1.0.7
10.0.0.6
10.0.1.0.6
10.0.0.4
10.0.2.0.3
10.0.0.5
10.0.1.0.5
10.0.2.0.4
10.0.2
10.0.2.0.1
10.0.2.0.2
10.0.1.0.4
10.0.0.3
9.0.2.0.5
10.0.1
10.0.1.0.1
10.0.1.0.2
9.0.2.0.3
10.0.1.0.3
10.0.1.0
10.0.1.1
10.0
9.0.2.0.0
9.0.2.0.1
10.0.1.2
10.0.0.2
9.0.2.0.4
7.0.3.0.8
7.0.2.0.31
10.0.0.1
9.0.2.0.2
9.0.1.0.6
9.0.1.0.5
6.0.6
7.0.1
7.0.2
6.0.6.1
7.0
9.0.1
9.0
8.4
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146540 - Deserialization of Untrusted Data CVE-2026-83557 |
CWE-502 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 01.09.2026 |
SB2026090116 SB2026092909 SB2026092956 and 2 more |
||
| #VU144596 - Server-Side Request Forgery (SSRF) CVE-2026-77310 |
CWE-918 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 24.08.2026 |
SB2026072278 SB2026090312 SB2026091103 and 2 more |
||
| #VU144594 - Resource exhaustion CVE-2026-68497 |
CWE-400 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 24.08.2026 |
SB2026082435 SB2026092909 SB2026092956 and 2 more |
||
| #VU144593 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') CVE-2026-19032 |
CWE-470 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 24.08.2026 |
SB2026082435 SB2026092909 SB2026092956 and 3 more |
||
| #VU139159 - Deserialization of Untrusted Data CVE-2026-54512 |
CWE-502 | High | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072282 SB2026072283 and 36 more |
||
| #VU139158 - Incomplete List of Disallowed Inputs CVE-2026-54513 |
CWE-184 | High | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072282 SB2026072283 and 38 more |
||
| #VU139157 - Server-Side Request Forgery (SSRF) CVE-2026-54514 |
CWE-918 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072288 SB2026072340 and 16 more |
||
| #VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes CVE-2026-54515 |
CWE-915 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072282 SB2026072288 and 18 more |
||
| #VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes CVE-2026-59888 |
CWE-915 | Medium | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072413 SB20260728138 and 10 more |
||
| #VU139151 - Incorrect Authorization CVE-2026-59889 |
CWE-863 | Low | 10.0.0.6, 10.0.1.0.7, 10.0.2.0.5, 10.0.3.0.2 | 22.07.2026 |
SB2026072278 SB2026072413 SB20260728138 and 10 more |
||
| #VU123577 - Missing release of memory after effective lifetime CVE-2026-1605 |
CWE-401 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 05.03.2026 |
SB2026030559 SB2026050522 SB2026061616 and 4 more |
||
| #VU123576 - Improper input validation CVE-2025-11143 |
CWE-20 | Low | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 05.03.2026 |
SB2026030558 SB2026040716 SB2026042070 and 13 more |
||
| #VU121727 - Improper input validation CVE-2026-21945 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 97 more |
||
| #VU121728 - Improper input validation CVE-2026-21932 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 78 more |
||
| #VU121729 - Improper input validation CVE-2026-21933 |
CWE-20 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 91 more |
||
| #VU121730 - Out-of-bounds read CVE-2026-21925 |
CWE-125 | Medium | 10.0.0.5, 10.0.1.0.5, 10.0.2.0.4 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 93 more |
||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 10.0.0.5, 10.0.1.0.6, 10.0.2.0.4 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 102 more |
||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | 9.0.2.0.5, 10.0.0.3, 10.0.1.0.4, 10.0.2.0.2 | 04.08.2025 |
SB2025080422 SB2025080423 SB2025080427 and 182 more |
||
| #VU113213 - Stack-based buffer overflow CVE-2025-33076 |
CWE-121 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.0.3 | 25.07.2025 |
SB2025072510 |
||
| #VU113211 - Use of Potentially Dangerous Function CVE-2024-38434 |
CWE-676 | Medium | 9.0.2.0.4, 10.0.0.2, 10.0.1.0.3 | 25.07.2025 |
SB2025072508 SB2025072509 |
Showing elements 1 - 20 out of 63