cpe:/a:ibm:urbancode_deploy:6.1 cpe:/a:ibm:urbancode_deploy:6.1.0.1 cpe:/a:ibm:urbancode_deploy:6.1.0.2 cpe:/a:ibm:urbancode_deploy:6.1.0.3 cpe:/a:ibm:urbancode_deploy:6.1.0.4 cpe:/a:ibm:urbancode_deploy:6.1.1 cpe:/a:ibm:urbancode_deploy:6.1.1.1 cpe:/a:ibm:urbancode_deploy:6.1.1.2 cpe:/a:ibm:urbancode_deploy:6.1.1.3 cpe:/a:ibm:urbancode_deploy:6.1.1.4 cpe:/a:ibm:urbancode_deploy:6.1.1.5 cpe:/a:ibm:urbancode_deploy:6.1.1.6 cpe:/a:ibm:urbancode_deploy:6.1.1.7 cpe:/a:ibm:urbancode_deploy:6.1.1.8 cpe:/a:ibm:urbancode_deploy:6.1.2 cpe:/a:ibm:urbancode_deploy:6.1.3 cpe:/a:ibm:urbancode_deploy:6.1.3.1 cpe:/a:ibm:urbancode_deploy:6.1.3.2 cpe:/a:ibm:urbancode_deploy:6.1.3.3 cpe:/a:ibm:urbancode_deploy:6.2.0.0 cpe:/a:ibm:urbancode_deploy:6.2.0.1 cpe:/a:ibm:urbancode_deploy:6.2.0.2 cpe:/a:ibm:urbancode_deploy:6.2.1 cpe:/a:ibm:urbancode_deploy:6.2.1.1 cpe:/a:ibm:urbancode_deploy:6.2.1.2 cpe:/a:ibm:urbancode_deploy:6.2.2 cpe:/a:ibm:urbancode_deploy:6.2.2.1 cpe:/a:ibm:urbancode_deploy:6.2.3.0 cpe:/a:ibm:urbancode_deploy:6.2.3.1 CVE-2016-9006 2017-03-08T14:59:00.253-05:00 2017-03-13T21:59:00.880-04:00 3.5 NETWORK MEDIUM SINGLE_INSTANCE NONE PARTIAL NONE http://nvd.nist.gov 2017-03-09T10:50:54.383-05:00 BID 96757 CONFIRM http://www.ibm.com/support/docview.wss?uid=swg2C1000264 IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.