CVE-2016-2994

CVE-2016-2994 describes a Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x prior to 6.2.1.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The root cause is related to vulnerable input handling in the 6.2.x line, ...