Known vulnerabilities in Rhapsody Systems Engineering

Vendor: IBM Corporation
Software: Rhapsody Systems Engineering
Software CPE: cpe:2.3:a:ibm_corporation:rhapsody_systems_engineering:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rhapsody Systems Engineering Rhapsody Systems Engineering is affected by 6 known vulnerabilities: 1 critical, 1 high, 4 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264		 CWE-1321 Medium
No
No
 1.8.0 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 5 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 1.8.0 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 23 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 1.5.5, 1.6.1 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 36 more
#VU119103 - Deserialization of Untrusted Data
CVE-2025-55182		 CWE-502 Critical
Available
Exploited
 1.5.3 03.12.2025 SB2025120333
SB2025121823
SB2025121829
and 6 more
#VU103116 - Improper Authorization
CVE-2024-51479		 CWE-285 Medium
No
No
 1.2.1 21.01.2025 SB2025012133
SB2025060972
SB2026030306
and 1 more
#VU103115 - Resource Management Errors
CVE-2024-56332		 CWE-399 Medium
No
No
 1.2.1 21.01.2025 SB2025012132
SB2025060529
SB2025060970
and 1 more