CVE:CVE-2018-1535
CNNVD:CNNVD-201807-1560
IBM Rational Software Architect（RSA）Design Manager和Rational Rhapsody Design Manager都是美国IBM公司的产品。RSA Design Manager是一套基于Jazz技术的协作式软件设计和开发平台。Rational Rhapsody Design Manager是一款通过中心设计存储库对设计和模型进行存储、共享、搜索和管理的软件。
IBM RSA Design Manager和Rational Rhapsody Design Manager中存在跨站脚本漏洞。远程攻击者可利用该漏洞向Web UI注入任意的JavaScript代码。以下产品和版本受到影响：IBM Rational Rhapsody Design Manager 5.0版本至5.0.2，6.0版本至6.0.5版本；IBM Rational Software Architect Design Manager 5.0版本至5.0.2版本，6.0版本至6.0.1版本。
solution:Upgrade ibm rational_rhapsody_design_manager to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]; Upgrade ibm rational_software_architect_design_manager to a higher version than 5.0.2,6.0.1,and avoid the version [5.0,5.0.2],[6.0,6.0.1]