Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm urbancode deploy 7.0.4.0 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2020-4483
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Fo...
Ibm Urbancode Deploy 6.2.7.3Ibm Urbancode Deploy 6.2.7.4Ibm Urbancode Deploy 7.0.3.0Ibm Urbancode Deploy 7.0.4.0
6.4
CVSSv2
CVE-2020-4481
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force I...
Ibm Urbancode Deploy 6.2.7.3Ibm Urbancode Deploy 6.2.7.4Ibm Urbancode Deploy 7.0.3.0Ibm Urbancode Deploy 7.0.4.0
4
CVSSv2
CVE-2020-4484
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticated user that could be used in further attacks against the system. IBM X-Force ID: 181858.
Ibm Urbancode Deploy 6.2.7.3Ibm Urbancode Deploy 6.2.7.4Ibm Urbancode Deploy 7.0.3.0Ibm Urbancode Deploy 7.0.4.0
4
CVSSv2
CVE-2020-4482
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.
Ibm Urbancode Deploy 7.0.3.0Ibm Urbancode Deploy 7.0.4.0Ibm Urbancode Deploy 6.2.7.3Ibm Urbancode Deploy 6.2.7.4
2.1
CVSSv2
CVE-2020-4944
IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. IBM X-Force ID: 191944.
Ibm Urbancode Deploy 7.0.3.0Ibm Urbancode Deploy 7.0.4.0Ibm Urbancode Deploy 7.0.5.3Ibm Urbancode Deploy 7.0.5.4Ibm Urbancode Deploy 7.1.0.0Ibm Urbancode Deploy 7.1.1.0Ibm Urbancode Deploy 7.1.1.1Ibm Urbancode Deploy 7.1.1.2
2.1
CVSSv2
CVE-2019-4668
IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171250.
Ibm Urbancode Deploy
6
CVSSv2
CVE-2020-4202
IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.
Ibm Urbancode Deploy
4
CVSSv2
CVE-2021-29711
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade through the CLI interface. IBM X-Force ID: 200965.
Ibm Urbancode Deploy
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook