CVE-2014-0948

IBM Rational Software Architect <4.0.7 - Authenticated Code Injection

Title source: llm

Description

Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21678323

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/92621

Scores

EPSS 0.0187

EPSS Percentile 77.2%

Details

Status published

Products (20)

ibm/rational_software_architect_design_manager 3.0.0

ibm/rational_software_architect_design_manager 3.0.0.1

ibm/rational_software_architect_design_manager 3.0.1

ibm/rational_software_architect_design_manager 4.0.0

ibm/rational_software_architect_design_manager 4.0.1

ibm/rational_software_architect_design_manager 4.0.2

ibm/rational_software_architect_design_manager 4.0.3

ibm/rational_software_architect_design_manager 4.0.4

ibm/rational_software_architect_design_manager 4.0.5

ibm/rational_software_architect_design_manager 4.0.6

... and 10 more

Published Jul 30, 2014

Tracked Since Feb 18, 2026