Description
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation UrbanCode Deploy
6.1.0.2affected6.0affected6.0.1affected6.0.1.1affected6.0.1.2affected6.0.1.3affected6.0.1.4affected6.0.1.5affected6.0.1.6affected6.1affected6.1.0.1affected6.1.0.3affected6.0.1.7affected6.0.1.8affected6.1.0.4affected6.1.1affected6.1.1.1affected6.1.1.2affected6.1.1.3affected6.1.1.4affected6.1.1.5affected6.0.1.9affected6.1.1.6affected6.1.1.7affected6.1.2affected6.0.1.10affected6.0.1.11affected6.1.1.8affected6.1.3affected6.1.3.1affected6.2affected6.2.0.1affected6.0.1.12affected6.1.3.2affected6.2.0.2affected6.2.1affected6.0.1.13affected6.2.1.1affected6.0.1.14affected6.1.3.3affected6.2.1.2affected6.2.2affected6.2.2.1affected6.2.3.0affected6.2.3.1affected