CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1749
https://notcve.org/view.php?id=CVE-2017-1749
IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522. IBM UrbanCode Deploy desde la versión 6.1 hasta la 6.9.6.0 podría permitir que un atacante remoto salte directorios del sistema. Un atacante no autenticado podría alterar las implementaciones de UCD. • https://exchange.xforce.ibmcloud.com/vulnerabilities/135522 https://www.ibm.com/support/docview.wss?uid=swg2C1000374 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 4.9EPSS: 0%CPEs: 2EXPL: 0CVE-2017-1752
https://notcve.org/view.php?id=CVE-2017-1752
IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547. IBM UrbanCode Deploy 6.1 y 6.2 podría permitir que un usuario autenticado privilegiado obtenga información altamente sensible. IBM X-Force ID: 135547. • http://www.ibm.com/support/docview.wss?uid=swg2C1000376 http://www.securityfocus.com/bid/104289 https://exchange.xforce.ibmcloud.com/vulnerabilities/135547 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 40EXPL: 0CVE-2017-1493
https://notcve.org/view.php?id=CVE-2017-1493
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691. IBM UrbanCode Deploy (UCD) 6.1 y 6.2 podría permitir que un usuario autenticado edite objetos a los que no debería tener acceso, debido a controles de acceso incorrectos. IBM X-Force ID: 128691. • http://www.ibm.com/support/docview.wss?uid=swg2C1000367 http://www.securityfocus.com/bid/102483 https://exchange.xforce.ibmcloud.com/vulnerabilities/128691 • CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-8900
https://notcve.org/view.php?id=CVE-2014-8900
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier. Existe una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en IBM UrbanCode Release 6.0.1.6 y anteriores, 6.1.0.7 y anteriores y 6.1.1.1 y anteriores. • http://www-01.ibm.com/support/docview.wss?uid=swg21695293 http://www.securityfocus.com/bid/72900 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.1EPSS: 0%CPEs: 38EXPL: 0CVE-2017-1149
https://notcve.org/view.php?id=CVE-2017-1149
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202. IBM UrbanCode Deploy (UCD) 6.0, 6.1, y 6.2 es vulnerable a una denegación de servicio, provocada por un error XML External Entity Injection (XXE) cuando procesa datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir todos los recursos de memoria disponibles. • http://www.ibm.com/support/docview.wss?uid=swg2C1000289 http://www.securityfocus.com/bid/98026 • CWE-611: Improper Restriction of XML External Entity Reference •