Non notée
CVE-2016-9006 IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Description
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.3.1 | Pas de correctif indiqué |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | Pas de correctif indiqué |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | Pas de correctif indiqué |
Autres CVE de UrbanCode Deploy
Les 7 CVE de UrbanCode Deploy →
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Non notée
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Non notée
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Non notée
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI…
Non notée