CVE-2025-33020

MEDIUM

IBM Engineering Systems Design Rhapsody <10.0.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7240374

Scores

CVSS v3 5.9
EPSS 0.0010
EPSS Percentile 0.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-311
Status published
Products (3)
ibm/engineering_systems_design_rhapsody 9.0.2
ibm/engineering_systems_design_rhapsody 10.0
ibm/engineering_systems_design_rhapsody 10.0.1
Published Jul 23, 2025
Tracked Since Feb 18, 2026