CVE-2019-4666

CVE-2019-4666 affects IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build (UCB) 6.1.5, where a local user could unmask certain secure values in documents to obtain sensitive information. The IBM bulletin notes a low-severity, local-access issue with CVSS v3.0 base score 2.3 (vector: AV:L/AC:...

CVE-2015-1983

IBM UrbanCode Build is vulnerable to cross-site scripting on the Projects page (CVE-2015-1983). The issue is caused by improper validation of user-supplied input, allowing remote authenticated users to execute script via a crafted URL. Affected versions: 6.1.0, 6.1.0.1, and 6.1.0.2 on all support...