Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.2.1.1:*:*:*:*:*:*:*

part: a version: 6.2.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1493 vulnerable 2026-06-08 05:09:22.438892 Details available
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T00:30:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1149 vulnerable 2026-06-08 05:09:21.076245 Details available
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T13:25:17.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9008 vulnerable 2026-06-08 05:08:22.384169 Details available
IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9006 vulnerable 2026-06-08 05:08:22.377866 Details available
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Published: 2017-03-08T19:00:00.000Z
Updated: 2024-08-06T02:35:02.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8938 vulnerable 2026-06-08 05:08:22.190287 Details available
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6068 vulnerable 2026-06-08 05:07:58.758550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2994 vulnerable 2026-06-08 05:07:44.001523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2942 vulnerable 2026-06-08 05:07:43.812557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2941 vulnerable 2026-06-08 05:07:43.810205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0320 vulnerable 2026-06-08 05:07:14.982026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.