Not rated
CVE-2016-9006 IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Description
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.3.1 | No fix stated |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | No fix stated |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | No fix stated |
Other CVEs of UrbanCode Deploy
The 7 CVEs of UrbanCode Deploy →
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Not rated
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Not rated
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Not rated
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI…
Not rated