CVE-2015-7415: XSS

Published Jan 1, 2016

Updated

Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected Software

27 affected components

IBM UrbanCode Deploy=6.0

IBM UrbanCode Deploy=6.0.1.0

IBM UrbanCode Deploy=6.0.1.1

IBM UrbanCode Deploy=6.0.1.2

IBM UrbanCode Deploy=6.0.1.3

IBM UrbanCode Deploy=6.0.1.4

IBM UrbanCode Deploy=6.0.1.5

IBM UrbanCode Deploy=6.0.1.6

IBM UrbanCode Deploy=6.0.1.7

IBM UrbanCode Deploy=6.0.1.8

IBM UrbanCode Deploy=6.0.1.9

IBM UrbanCode Deploy=6.0.1.10

IBM UrbanCode Deploy=6.0.1.11

IBM UrbanCode Deploy=6.1.1.0

IBM UrbanCode Deploy=6.1.1.1

IBM UrbanCode Deploy=6.1.1.2

IBM UrbanCode Deploy=6.1.1.3

IBM UrbanCode Deploy=6.1.1.4

IBM UrbanCode Deploy=6.1.1.5

IBM UrbanCode Deploy=6.1.1.6

IBM UrbanCode Deploy=6.1.1.7

IBM UrbanCode Deploy=6.1.1.8

IBM UrbanCode Deploy=6.1.2

IBM UrbanCode Deploy=6.1.3

IBM UrbanCode Deploy=6.1.3.1

IBM UrbanCode Deploy=6.2.0.0

IBM UrbanCode Deploy=6.2.0.1

Event History

Jan 1, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7415?

CVE-2015-7415 is considered a high-severity vulnerability due to its potential for remote code execution via XSS.

How do I fix CVE-2015-7415?

To fix CVE-2015-7415, upgrade IBM UrbanCode Deploy to versions 6.0.1.12, 6.1.3.2, or 6.2.0.2 or later.

What are the affected versions of IBM UrbanCode Deploy for CVE-2015-7415?

CVE-2015-7415 affects IBM UrbanCode Deploy versions 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2.

What type of vulnerability is CVE-2015-7415?

CVE-2015-7415 is a cross-site scripting (XSS) vulnerability that allows authenticated users to inject arbitrary web scripts.

Who is impacted by CVE-2015-7415?

Remote authenticated users of IBM UrbanCode Deploy are impacted by CVE-2015-7415.