CVE-2016-8938
Estado: ModificadaCrítica (10)—
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.82%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-284
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-8938",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 10,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM Corporation",
"product": "UrbanCode Deploy",
"versions": [
{
"status": "affected",
"version": "6.1.0.2"
},
{
"status": "affected",
"version": "6.0"
},
{
"status": "affected",
"version": "6.0.1"
},
{
"status": "affected",
"version": "6.0.1.1"
},
{
"status": "affected",
"version": "6.0.1.2"
},
{
"status": "affected",
"version": "6.0.1.3"
},
{
"status": "affected",
"version": "6.0.1.4"
},
{
"status": "affected",
"version": "6.0.1.5"
},
{
"status": "affected",
"version": "6.0.1.6"
},
{
"status": "affected",
"version": "6.1"
},
{
"status": "affected",
"version": "6.1.0.1"
},
{
"status": "affected",
"version": "6.1.0.3"
},
{
"status": "affected",
"version": "6.0.1.7"
},
{
"status": "affected",
"version": "6.0.1.8"
},
{
"status": "affected",
"version": "6.1.0.4"
},
{
"status": "affected",
"version": "6.1.1"
},
{
"status": "affected",
"version": "6.1.1.1"
},
{
"status": "affected",
"version": "6.1.1.2"
},
{
"status": "affected",
"version": "6.1.1.3"
},
{
"status": "affected",
"version": "6.1.1.4"
},
{
"status": "affected",
"version": "6.1.1.5"
},
{
"status": "affected",
"version": "6.0.1.9"
},
{
"status": "affected",
"version": "6.1.1.6"
},
{
"status": "affected",
"version": "6.1.1.7"
},
{
"status": "affected",
"version": "6.1.2"
},
{
"status": "affected",
"version": "6.0.1.10"
},
{
"status": "affected",
"version": "6.0.1.11"
},
{
"status": "affected",
"version": "6.1.1.8"
},
{
"status": "affected",
"version": "6.1.3"
},
{
"status": "affected",
"version": "6.1.3.1"
},
{
"status": "affected",
"version": "6.2"
},
{
"status": "affected",
"version": "6.2.0.1"
},
{
"status": "affected",
"version": "6.0.1.12"
},
{
"status": "affected",
"version": "6.1.3.2"
},
{
"status": "affected",
"version": "6.2.0.2"
},
{
"status": "affected",
"version": "6.2.1"
},
{
"status": "affected",
"version": "6.0.1.13"
},
{
"status": "affected",
"version": "6.2.1.1"
},
{
"status": "affected",
"version": "6.0.1.14"
},
{
"status": "affected",
"version": "6.1.3.3"
},
{
"status": "affected",
"version": "6.2.1.2"
},
{
"status": "affected",
"version": "6.2.2"
}
]
}
]
}
],
"published": "2017-02-01T22:59:00.977",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000237",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/95289",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000237",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/95289",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications."
},
{
"lang": "es",
"value": "IBM UrbanCode Deploy podría permitir que un usuario ejecute código usando una carga de archivo especialmente creada que reemplazaría el código en el servidor. Este código podría ejecutarse en las máquinas de agente UCD que alojan las aplicaciones de producción del cliente."
}
],
"lastModified": "2026-06-17T00:55:12.857",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BEE7852-A76C-4085-B14D-8BA67D825A8E"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C35B3347-EE12-4E84-92D9-533DA7F1581E"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32C10FFF-250A-4530-B631-1B1DAA3B4BC9"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE176DE5-BB60-4999-A2B4-D93C8AB776DB"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "751113D0-7085-4AE7-8F39-292293F297FA"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31217ED6-C154-49CF-BD65-C272D630F58A"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F69D247-B168-40EC-BA4B-1C50879B64BF"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C822B4AB-4032-4BEB-A413-A80398A28EAF"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF310F06-6674-470E-B258-4DF042B1FA68"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEF92016-8494-4EBE-A32F-A123C1517F63"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "744A36AB-5BC8-4FE1-BB91-9BC3019EBB99"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4535B6A-0791-4855-BED4-01A8279F4930"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C108D461-F391-491B-B1B4-AEB3155C2196"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A66AD80-303B-44B0-B773-701503F5B7E5"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AF8BEEC-5F93-424B-94F6-622B9BA84CDA"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DE72929-3618-4341-83DC-E4A006EE3D0E"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F59AC6D5-1F06-4EC4-BD36-6FA5221AE611"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7ED1843-E659-4931-8E08-8867D4286A18"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6082BBED-6184-4173-BF5A-5B536FADBB39"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "054A3ED4-290A-484D-9F51-93A71968CAA9"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C5B4753-3685-4088-A4B1-C4AE58C11F3D"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32732445-6761-40F0-836B-E7EAC9B9239B"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF8034DC-C20D-4972-AFBA-D3EBF8664164"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5409F075-5268-476E-BEFE-2B93C8BB2870"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F43800F6-328E-4481-B6AE-44A50F368314"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1A72039-925C-48AE-8012-BA6AEE659D27"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57A488B1-1221-46C4-B97D-B895368E3A6B"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF8D9BF8-E9DD-4967-86CE-DE2A6FF6DADE"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CFD390D-531E-4BC7-B9D4-74208E153F20"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93406315-DD19-45E5-84EE-B5D8F0A903D8"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C970147-39E9-4CCC-9FDE-B70546941323"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61F991AF-CD34-4307-85B0-58107E4CE1D1"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "104066B9-7D5C-44FA-8745-DBD019761AC9"
},
{
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "456DB48D-39E4-4F66-BEC4-1B7B135214BA"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}