Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*

part: a version: 6.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.055411 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0365 vulnerable 2026-06-08 05:07:15.091367 Details available
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors.
Published: 2016-07-01T01:00:00.000Z
Updated: 2024-08-05T22:15:24.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0364 vulnerable 2026-06-08 05:07:15.090267 Details available
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters.
Published: 2016-07-01T01:00:00.000Z
Updated: 2024-08-05T22:15:24.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0271 vulnerable 2026-06-08 05:07:14.783139 Details available
The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.
Published: 2016-07-08T01:00:00.000Z
Updated: 2024-08-05T22:15:23.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0267 vulnerable 2026-06-08 05:07:14.750244 Details available
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via (1) the server UI or (2) a database request.
Published: 2016-06-29T01:00:00.000Z
Updated: 2024-08-05T22:15:23.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7415 vulnerable 2026-06-08 05:07:00.768884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4964 vulnerable 2026-06-08 05:06:48.313436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.