CVE-2018-1585

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=ibm10716029Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143498VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10716029Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143498VDB Entry, Vendor Advisory

Published

Jul 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15844An issue was discovered in DamiCMS 6.0.0. There is an CSRF v…
• CVE-2018-15845There is a CSRF vulnerability that can add an administrator …
• CVE-2018-15846An issue was discovered in fledrCMS through 2014-02-03. Ther…
• CVE-2018-15847An issue was discovered in puppyCMS 5.1. There is an XSS vul…
• CVE-2018-15848An issue was discovered in portfolioCMS 1.0.5. There is CSRF…
• CVE-2018-15849An issue was discovered in portfolioCMS 1.0.5. There is CSRF…
• CVE-2018-15850An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF…
• CVE-2018-15851An issue was discovered in Flexo CMS v0.1.6. There is a CSRF…
• CVE-2018-15852Technicolor TC7200.20 devices allow remote attackers to caus…
• CVE-2018-15853Endless recursion exists in xkbcomp/expr.c in xkbcommon and …
• CVE-2018-15854Unchecked NULL pointer usage in xkbcommon before 0.8.1 could…
• CVE-2018-15855Unchecked NULL pointer usage in xkbcommon before 0.8.1 could…