Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1493 vulnerable 2026-06-08 05:09:22.431702 Details available
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T00:30:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.066973 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9008 vulnerable 2026-06-08 05:08:22.383875 Details available
IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9006 vulnerable 2026-06-08 05:08:22.377447 Details available
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Published: 2017-03-08T19:00:00.000Z
Updated: 2024-08-06T02:35:02.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8938 vulnerable 2026-06-08 05:08:22.181773 Details available
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6068 vulnerable 2026-06-08 05:07:58.750214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2942 vulnerable 2026-06-08 05:07:43.812284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2941 vulnerable 2026-06-08 05:07:43.801404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0365 vulnerable 2026-06-08 05:07:15.091776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0364 vulnerable 2026-06-08 05:07:15.090598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0320 vulnerable 2026-06-08 05:07:14.978768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0271 vulnerable 2026-06-08 05:07:14.785796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0267 vulnerable 2026-06-08 05:07:14.760009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7415 vulnerable 2026-06-08 05:07:00.775577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4964 vulnerable 2026-06-08 05:06:48.320574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.