CVE-2016-2994 (urbancode_deploy)
Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Source: CVE-2016-2994 (urbancode_deploy)