CVE-2016-9008

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.

• CWE-284

• http://www.ibm.com/support/docview.wss?uid=swg2C1000238Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95283Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg2C1000238Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95283Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8987IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an…
• CVE-2016-8998IBM Tivoli Storage Manager Server 7.1 could allow an authent…
• CVE-2016-8999IBM InfoSphere Information Server contains a Path-relative s…
• CVE-2016-9000IBM InfoSphere DataStage is vulnerable to cross-frame script…
• CVE-2016-9005IBM System Storage TS3100-TS3200 Tape Library could allow an…
• CVE-2016-9006IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site…
• CVE-2016-9009IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remo…
• CVE-2016-9011The wmf_malloc function in api.c in libwmf 0.2.8.4 allows re…
• CVE-2016-9012CloudVision Portal (CVP) before 2016.1.2.1 allows remote aut…
• CVE-2016-9013Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x …
• CVE-2016-9014Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and …