Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*

part: a version: 6.1.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1493 vulnerable 2026-06-08 05:09:22.431685 Details available
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T00:30:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.066465 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0365 vulnerable 2026-06-08 05:07:15.091760 Details available
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors.
Published: 2016-07-01T01:00:00.000Z
Updated: 2024-08-05T22:15:24.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0364 vulnerable 2026-06-08 05:07:15.090582 Details available
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters.
Published: 2016-07-01T01:00:00.000Z
Updated: 2024-08-05T22:15:24.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0271 vulnerable 2026-06-08 05:07:14.785778 Details available
The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.
Published: 2016-07-08T01:00:00.000Z
Updated: 2024-08-05T22:15:23.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0267 vulnerable 2026-06-08 05:07:14.759553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7415 vulnerable 2026-06-08 05:07:00.775107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4964 vulnerable 2026-06-08 05:06:48.319963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.