Cross site scripting

Cross-site scripting XSS vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before 6.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1983

IBM UrbanCode Build is vulnerable to cross-site scripting on the Projects page (CVE-2015-1983). The issue is caused by improper validation of user-supplied input, allowing remote authenticated users to execute script via a crafted URL. Affected versions: 6.1.0, 6.1.0.1, and 6.1.0.2 on all support...

CVE-2015-1983

Cross-site scripting XSS vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before 6.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2015-5531

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Build versions 6.1.x through 6.1.0 Description A cross-site scripting XSS issue exists in the Projects page, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Recommendations For IBM...

CVE-2015-1983: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before 6.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

IBM UrbanCode Build Cross-Site Scripting Vulnerability

IBM UrbanCode Build is a continuous integration and build management server from IBM USA. A cross-site scripting vulnerability exists in IBM UrbanCode Build. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of a specially crafted URL...

CVE-2014-6074

IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page...

Design/Logic Flaw

IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page...

CVE-2014-6074

IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page...

CVE-2014-6074

IBM UrbanCode Deploy 6.1.0.2 before IF1 is affected. The flaw allows remote authenticated users to read keystore secret keys via direct access to a UI page, potentially exposing all encrypted values and SSL communications between server and agents. The IBM security bulletin notes the affected pro...

CVE-2014-6074: Undefined Security Weakness

IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page...

PT-2014-7024

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy version 6.1.0.2 before IF1 Description The issue allows remote authenticated users to read keystore secret keys via a direct request to a UI page. Recommendations For IBM UrbanCode Deploy version 6.1.0.2, apply the IF1 pat...