Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*

part: a version: 6.1.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1493 vulnerable 2026-06-08 05:09:22.431736 Details available
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T00:30:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.068056 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9008 vulnerable 2026-06-08 05:08:22.383908 Details available
IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9006 vulnerable 2026-06-08 05:08:22.377481 Details available
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Published: 2017-03-08T19:00:00.000Z
Updated: 2024-08-06T02:35:02.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8938 vulnerable 2026-06-08 05:08:22.182701 Details available
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6068 vulnerable 2026-06-08 05:07:58.751187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2942 vulnerable 2026-06-08 05:07:43.812316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2941 vulnerable 2026-06-08 05:07:43.802553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0365 vulnerable 2026-06-08 05:07:15.091808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0364 vulnerable 2026-06-08 05:07:15.090633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0320 vulnerable 2026-06-08 05:07:14.978813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0271 vulnerable 2026-06-08 05:07:14.785831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0267 vulnerable 2026-06-08 05:07:14.761041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7415 vulnerable 2026-06-08 05:07:00.776523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4964 vulnerable 2026-06-08 05:06:48.321728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.