1. Home
  2. CVE Database
  3. CVE-2016-9697
LOW · 3.1

CVE-2016-9697

An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed betwe...

Vulnerability Description

An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed between the server and the browser. IBM Reference #: 1999960.

CVSS Score

3.1

LOW

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmRational Rhapsody Design Manager4.0

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2016-9697?

CVE-2016-9697 is a vulnerability with a CVSS score of 3.1 (LOW). An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed betwe...

How severe is CVE-2016-9697?

CVE-2016-9697 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-9697?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Rational Rhapsody Design Manager.