Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*

part: a version: 6.2.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1493 vulnerable 2026-06-08 05:09:22.437455 Details available
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T00:30:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.074235 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9008 vulnerable 2026-06-08 05:08:22.384130 Details available
IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9006 vulnerable 2026-06-08 05:08:22.377831 Details available
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Published: 2017-03-08T19:00:00.000Z
Updated: 2024-08-06T02:35:02.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8938 vulnerable 2026-06-08 05:08:22.189035 Details available
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6068 vulnerable 2026-06-08 05:07:58.757539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2994 vulnerable 2026-06-08 05:07:44.000144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2942 vulnerable 2026-06-08 05:07:43.812525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2941 vulnerable 2026-06-08 05:07:43.809210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0365 vulnerable 2026-06-08 05:07:15.091999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0364 vulnerable 2026-06-08 05:07:15.090836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0320 vulnerable 2026-06-08 05:07:14.980786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0271 vulnerable 2026-06-08 05:07:14.786035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0267 vulnerable 2026-06-08 05:07:14.766884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.