CVE-2016-9006

Description

IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.

Risk Information

Base Score
5.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.303

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.0.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.3Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.4Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.5Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.6Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.7Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1.8Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.3Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.3.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.0.0Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.0.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.0.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.0.3Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.0.4Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.3.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.0.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.1.3.3Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.1.1Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.2.2.1Windows
Vulnerabilities CVE-2016-9006,CVE-2017-1493 are affected in IBM UrbanCode Deploy 6.2.1.2Windows
Vulnerabilities CVE-2016-9006,CVE-2017-1493 are affected in IBM UrbanCode Deploy 6.2.3.0Windows
Vulnerabilities CVE-2016-9006,CVE-2017-1493 are affected in IBM UrbanCode Deploy 6.2.3.1Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234