CVE-2014-0948: IBM Rational Software Architect Design Manager

Medium severity, CVSS 6.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.

Affected products

• IBM Rational Software Architect Design Manager: version 3.0.0 only; version 3.0.0.1 only; version 3.0.1 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; …
• IBM Rhapsody Design Manager: version 3.0.0 only; version 3.0.0.1 only; version 3.0.1 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; …

Published 2014-07-30. Last modified 2026-06-17.