GCVE - cpe:2.3:a:ibm:urbancode_deploy:6.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:6.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Urbancode Deploy (`0679d7fc-7b03-58d0-a43c-6833b153add1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9008`	vulnerable	2026-06-08 05:08:22.383859	Details available IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.658Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95283 http://www.ibm.com/support/docview.wss?uid=swg2C1000238	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9006`	vulnerable	2026-06-08 05:08:22.377428	Details available IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264. Published: 2017-03-08T19:00:00.000Z Updated: 2024-08-06T02:35:02.554Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg2C1000264 http://www.securityfocus.com/bid/96757	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8938`	vulnerable	2026-06-08 05:08:22.181290	Details available IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.317Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95289 http://www.ibm.com/support/docview.wss?uid=swg2C1000237	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6068`	vulnerable	2026-06-08 05:07:58.749747	Details available IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T01:22:19.009Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg2C1000229 http://www.securityfocus.com/bid/95290	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2942`	vulnerable	2026-06-08 05:07:43.812269	Details available IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-05T23:40:13.765Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95975 http://www.ibm.com/support/docview.wss?uid=swg2C1000218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2941`	vulnerable	2026-06-08 05:07:43.800907	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0320`	vulnerable	2026-06-08 05:07:14.978727	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.