CVE-2015-7415

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0 before 6.0.1.12 IBM UrbanCode Deploy versions 6.1 before 6.1.3.2 IBM UrbanCode Deploy versions 6.2 before 6.2.0.2

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, which can lead to cross-site scripting (XSS) attacks.

Recommendations For IBM UrbanCode Deploy version 6.0, update to version 6.0.1.12 or later. For IBM UrbanCode Deploy version 6.1, update to version 6.1.3.2 or later. For IBM UrbanCode Deploy version 6.2, update to version 6.2.0.2 or later.