CVSS: 4.9EPSS: 0%CPEs: 2EXPL: 0CVE-2017-1752
https://notcve.org/view.php?id=CVE-2017-1752
IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547. IBM UrbanCode Deploy 6.1 y 6.2 podría permitir que un usuario autenticado privilegiado obtenga información altamente sensible. IBM X-Force ID: 135547. • http://www.ibm.com/support/docview.wss?uid=swg2C1000376 http://www.securityfocus.com/bid/104289 https://exchange.xforce.ibmcloud.com/vulnerabilities/135547 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 40EXPL: 0CVE-2017-1493
https://notcve.org/view.php?id=CVE-2017-1493
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691. IBM UrbanCode Deploy (UCD) 6.1 y 6.2 podría permitir que un usuario autenticado edite objetos a los que no debería tener acceso, debido a controles de acceso incorrectos. IBM X-Force ID: 128691. • http://www.ibm.com/support/docview.wss?uid=swg2C1000367 http://www.securityfocus.com/bid/102483 https://exchange.xforce.ibmcloud.com/vulnerabilities/128691 • CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-8900
https://notcve.org/view.php?id=CVE-2014-8900
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier. Existe una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en IBM UrbanCode Release 6.0.1.6 y anteriores, 6.1.0.7 y anteriores y 6.1.1.1 y anteriores. • http://www-01.ibm.com/support/docview.wss?uid=swg21695293 http://www.securityfocus.com/bid/72900 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.1EPSS: 0%CPEs: 38EXPL: 0CVE-2017-1149
https://notcve.org/view.php?id=CVE-2017-1149
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202. IBM UrbanCode Deploy (UCD) 6.0, 6.1, y 6.2 es vulnerable a una denegación de servicio, provocada por un error XML External Entity Injection (XXE) cuando procesa datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir todos los recursos de memoria disponibles. • http://www.ibm.com/support/docview.wss?uid=swg2C1000289 http://www.securityfocus.com/bid/98026 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 5.4EPSS: 0%CPEs: 29EXPL: 0CVE-2016-9006
https://notcve.org/view.php?id=CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264. IBM UrbanCode Deploy 6.1 y 6.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz web alterando así la funcionalidad prevista potencialmente conduciendo a la divulgación de credenciales dentro de una sesión de confianza. • http://www.ibm.com/support/docview.wss?uid=swg2C1000264 http://www.securityfocus.com/bid/96757 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •