Description
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.
Published: 2025-07-23
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

IBM Engineering Systems Design Rhapsody 9.0.2 iFix004 IBM Engineering Systems Design Rhapsody 10.0 iFix002 IBM Engineering Systems Design Rhapsody 10.0.1 iFix003

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-22451 IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.
History

Mon, 11 Aug 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Ibm engineering Systems Design Rhapsody
CPEs cpe:2.3:a:ibm:engineering_systems_design_rhapsody:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_systems_design_rhapsody:10.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:engineering_systems_design_rhapsody:9.0.2:*:*:*:*:*:*:*
Vendors & Products Ibm engineering Systems Design Rhapsody

Wed, 23 Jul 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 23 Jul 2025 15:00:00 +0000

Type Values Removed Values Added
Description IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.
Title IBM Engineering Systems Design Rhapsody information disclosure
First Time appeared Ibm
Ibm rhapsody Design Manager
Weaknesses CWE-311
CPEs cpe:2.3:a:ibm:rhapsody_design_manager:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rhapsody_design_manager:10.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rhapsody_design_manager:9.0.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm rhapsody Design Manager
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ibm Engineering Systems Design Rhapsody Rhapsody Design Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2025-08-18T01:31:04.799Z

Reserved: 2025-04-15T09:48:51.520Z

Link: CVE-2025-33020

cve-icon Vulnrichment

Updated: 2025-07-23T15:19:39.839Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-23T15:15:31.247

Modified: 2025-08-11T18:56:26.707

Link: CVE-2025-33020

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses