PT-2016-5315 · Ibm · Ibm Urbancode Deploy

Publicado 2016-12-01 · Atualizado 2016-12-06 · CVE-2016-2994

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.2.x through 6.2.1.1

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML.

Recommendations For IBM UrbanCode Deploy versions 6.2.x through 6.2.1.1, update to version 6.2.1.2 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-2994

Produtos afetados

Ibm Urbancode Deploy

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-2994 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2994 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg2C1000177 · Aviso do Fabricante
• http://securityfocus.com/bid/92870 · Nota