CVE-2016-9698: IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity In...

Security readout for executives and security teams

IBM Rational Rhapsody Design Manager has an XML processing flaw that could let a remote attacker trigger denial of service or expose sensitive information. The public bundle does not provide a CVSS score, confirmed exploitation, or specific fixed version details, so urgency depends on whether affected releases remain reachable in your environment. Exposure is limited to organizations running IBM Rational Rhapsody Design Manager versions listed in the bundle, including 4.0.x, 5.0.x, and 6.0.x. Risk is higher where untrusted or remote users can submit XML data to the application. Handle as a targeted legacy-product exposure issue. Prioritize remediation if Rhapsody DM remains in production, stores sensitive engineering data, or is reachable by broad user groups. Lack of CVSS and exploit evidence lowers certainty, not impact potential. Mitigation focus: Review IBM advisories 1999960 and swg22002258 for vendor-directed remediation.; Inventory Rhapsody Design Manager versions and prioritize listed affected releases.; Limit network access to Rhapsody DM to trusted users and networks..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.