CVE-2025-33020CWE-311

IBM Engineering Systems Design Rhapsody information disclosure

Medium · published July 23, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2025-07-23T14:47Z
EPSS history
Timeline
  • 23 JUL 14:47Z
    IBM Engineering Systems Design Rhapsody information disclosure
    cvelistv5