← back
CVE-2018-1535

CVE-2018-1535

CVSS 5.4 MEDIUMEPSS 0.7%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Jul 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.
CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O
Affected products
IBM · Rational Rhapsody Design ManagerIBM · Rational Software Architect Design Manager
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/142557http://www.ibm.com/support/docview.wss?uid=ibm10716029