UD
Product
UrbanCode Deploy
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add UrbanCode Deploy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8938 | 10.0 | Feb 1 | IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-2942 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent… Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-6068 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-9008 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-2941 | 5.5 | Feb 1 | IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-9006 | 5.4 | Mar 8 | IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
| CVE-2016-0320 | 4.3 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects Affected: 6.1.0.2; 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; +34 more |
Showing 7