Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm urbancode deploy 6.0.1.9 vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2015-4964
IBM UrbanCode Deploy 6.0 and 6.0.1.x prior to 6.0.1.10, 6.1.1.x prior to 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.
Ibm Urbancode Deploy 6.0.1.0Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.0.1.9Ibm Urbancode Deploy 6.1.1.1Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.1.1.3Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.0.1.7Ibm Urbancode Deploy 6.0.1.8Ibm Urbancode Deploy 6.0.1.1Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.1.1.0Ibm Urbancode Deploy 6.1.1.2Ibm Urbancode Deploy 6.1.1.7
3.5
CVSSv2
CVE-2015-7415
Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 prior to 6.0.1.12, 6.1 prior to 6.1.3.2, and 6.2 prior to 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.0.1.1Ibm Urbancode Deploy 6.0.1.0Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.0.1.11Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.1.3Ibm Urbancode Deploy 6.1.1.1Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.0.0Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.1.3Ibm Urbancode Deploy 6.0.1.9Ibm Urbancode Deploy 6.0.1.8Ibm Urbancode Deploy 6.0.1.7Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.1.1.8
7.2
CVSSv2
CVE-2016-0271
The agents in IBM UrbanCode Deploy 6.x prior to 6.0.1.14, 6.1.x prior to 6.1.3.3, and 6.2.x prior to 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.
Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.1.2Ibm Urbancode Deploy 6.1Ibm Urbancode Deploy 6.0.1.9Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.0.1.10Ibm Urbancode Deploy 6.2.1Ibm Urbancode Deploy 6.2.0.2Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.0.0Ibm Urbancode Deploy 6.1.1.0Ibm Urbancode Deploy 6.1.0.4Ibm Urbancode Deploy 6.1.0.3Ibm Urbancode Deploy 6.1.0.2Ibm Urbancode Deploy 6.1.0.1Ibm Urbancode Deploy 6.0.1.1Ibm Urbancode Deploy 6.0.1.0Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.1.1.8Ibm Urbancode Deploy 6.1.1.7
4
CVSSv2
CVE-2016-0267
IBM UrbanCode Deploy 6.0.x prior to 6.0.1.13, 6.1.x prior to 6.1.3.3, and 6.2.x prior to 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via (1) the server UI or (2) a database request.
Ibm Urbancode Deploy 6.1.3.2Ibm Urbancode Deploy 6.1.3Ibm Urbancode Deploy 6.1.1.8Ibm Urbancode Deploy 6.1.1.3Ibm Urbancode Deploy 6.1.1.1Ibm Urbancode Deploy 6.0.1.12Ibm Urbancode Deploy 6.0.1.8Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.0.1.11Ibm Urbancode Deploy 6.0.1.1Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.0.1.7Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.2.1Ibm Urbancode Deploy 6.2.0.2Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.0.0
4
CVSSv2
CVE-2016-0364
IBM UrbanCode Deploy 6.0.x prior to 6.0.1.13, 6.1.x prior to 6.1.3.3, and 6.2.x prior to 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special ...
Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.0.0Ibm Urbancode Deploy 6.1.3.2Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.1.0.2Ibm Urbancode Deploy 6.1.0.1Ibm Urbancode Deploy 6.1Ibm Urbancode Deploy 6.0.1.12Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.1.3Ibm Urbancode Deploy 6.1.1.2Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.2.1Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.0
4.3
CVSSv2
CVE-2016-0365
IBM UrbanCode Deploy 6.0.x prior to 6.0.1.13, 6.1.x prior to 6.1.3.3, and 6.2.x prior to 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote malicious users to bypass authentication and obtain sensitive artifact information via unspecified vectors.
Ibm Urbancode Deploy 6.2.1Ibm Urbancode Deploy 6.2.0.0Ibm Urbancode Deploy 6.1.3.2Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.0.2Ibm Urbancode Deploy 6.1.0.1Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.2.0.2Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.0.4Ibm Urbancode Deploy 6.1.0.3Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.0.1.0Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.1.8Ibm Urbancode Deploy 6.1.1.1
7.5
CVSSv2
CVE-2017-1149
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available m...
Ibm Urbancode Deploy 6.0.1.0Ibm Urbancode Deploy 6.0.1.7Ibm Urbancode Deploy 6.0.1.9Ibm Urbancode Deploy 6.1Ibm Urbancode Deploy 6.1.0.3Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.0.201Ibm Urbancode Deploy 6.0.1.10Ibm Urbancode Deploy 6.0.1.11Ibm Urbancode Deploy 6.0.1.12Ibm Urbancode Deploy 6.0.1.13Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.3Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.1.3.2Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.1.1.0
5
CVSSv2
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties.
Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.0.1.7Ibm Urbancode Deploy 6.0.1.8Ibm Urbancode Deploy 6.0.1.9Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.8Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.3Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.0.1.1Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.1Ibm Urbancode Deploy 6.1.0.2Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.3.3Ibm Urbancode Deploy 6.2.0.1Ibm Urbancode Deploy 6.2.2.1Ibm Urbancode Deploy 6.0.1.10Ibm Urbancode Deploy 6.0.1.11
10
CVSSv2
CVE-2016-8938
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Ibm Urbancode Deploy 6.0.1.11Ibm Urbancode Deploy 6.0.1.12Ibm Urbancode Deploy 6.0.1.13Ibm Urbancode Deploy 6.0.1.14Ibm Urbancode Deploy 6.1.1Ibm Urbancode Deploy 6.1.1.1Ibm Urbancode Deploy 6.1.1.2Ibm Urbancode Deploy 6.1.1.3Ibm Urbancode Deploy 6.2.1Ibm Urbancode Deploy 6.2.1.1Ibm Urbancode Deploy 6.2.2Ibm Urbancode Deploy 6.2.2.1Ibm Urbancode Deploy 6.0.1Ibm Urbancode Deploy 6.0.1.10Ibm Urbancode Deploy 6.0.1.2Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.1.0.1Ibm Urbancode Deploy 6.1.0.3Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.2.0.0
6
CVSSv2
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine.
Ibm Urbancode Deploy 6.0.1.3Ibm Urbancode Deploy 6.0.1.4Ibm Urbancode Deploy 6.0.1.5Ibm Urbancode Deploy 6.0.1.6Ibm Urbancode Deploy 6.1.1.4Ibm Urbancode Deploy 6.1.1.5Ibm Urbancode Deploy 6.1.1.6Ibm Urbancode Deploy 6.1.1.7Ibm Urbancode Deploy 6.1.1.8Ibm Urbancode Deploy 6.0.1.12Ibm Urbancode Deploy 6.0.1.14Ibm Urbancode Deploy 6.0.1.8Ibm Urbancode Deploy 6.1Ibm Urbancode Deploy 6.1.1Ibm Urbancode Deploy 6.1.1.2Ibm Urbancode Deploy 6.1.2Ibm Urbancode Deploy 6.1.3.1Ibm Urbancode Deploy 6.2.1.1Ibm Urbancode Deploy 6.2.2.1Ibm Urbancode Deploy 6.0Ibm Urbancode Deploy 6.0.1Ibm Urbancode Deploy 6.0.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook