Vulnerabilities > IBM > Urbancode Deploy > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-07-08 | CVE-2016-0271 | Permissions, Privileges, and Access Controls vulnerability in IBM Urbancode Deploy The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors. | 8.2 |
| 2016-06-29 | CVE-2016-0267 | Information Exposure vulnerability in IBM Urbancode Deploy IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via (1) the server UI or (2) a database request. | 7.7 |