GCVE - cpe:2.3:a:ibm_corporation:urbancode_deploy:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:urbancode_deploy:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm Corporation (`d12a6641-f3f1-52ca-aee3-0e264bbe9c89`)
Product	Urbancode Deploy (`2cd711e0-ac9f-5480-b437-48d3d9c52511`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9008`	vulnerable	2026-06-08 05:08:22.383317	Details available IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.658Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95283 http://www.ibm.com/support/docview.wss?uid=swg2C1000238	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9006`	vulnerable	2026-06-08 05:08:22.377275	Details available IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264. Published: 2017-03-08T19:00:00.000Z Updated: 2024-08-06T02:35:02.554Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg2C1000264 http://www.securityfocus.com/bid/96757	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8938`	vulnerable	2026-06-08 05:08:22.169347	Details available IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.317Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95289 http://www.ibm.com/support/docview.wss?uid=swg2C1000237	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6068`	vulnerable	2026-06-08 05:07:58.738282	Details available IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T01:22:19.009Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg2C1000229 http://www.securityfocus.com/bid/95290	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2942`	vulnerable	2026-06-08 05:07:43.811844	Details available IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-05T23:40:13.765Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95975 http://www.ibm.com/support/docview.wss?uid=swg2C1000218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2941`	vulnerable	2026-06-08 05:07:43.788831	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0320`	vulnerable	2026-06-08 05:07:14.973900	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.