CVE-2018-1587

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Rational Software Architect Design Manager	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1
IBM	Rational Rhapsody Design Manager	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5

References

http://www.ibm.com/support/docview.wss?uid=ibm10716029Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143500VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10716029Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143500VDB Entry, Vendor Advisory

Timeline

Published: Jul 19, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-158706.5An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a CVE-2018-158716.5An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulner CVE-2018-158739.8A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.CVE-2018-158746.1Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active CVE-2018-158756.1Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP CVE-2018-158765.3An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form re CVE-2018-158778.8The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip CVE-2018-15887.1IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Enti CVE-2018-158805.4An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack.CVE-2018-158817.5An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.CVE-2018-158829.8An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to CVE-2018-158848.8RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.