Skip to content
OpenAdvisories

Product · IBM

DevOps Deploy

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-1998

    IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure

    IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local use…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 5.4
    CVE-2025-1997

    IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbi…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 6.3
    CVE-2024-56469

    IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication

    IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to mi…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 4.3
    CVE-2024-54176

    IBM UrbanCode Deploy missing authentication

    IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other user…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 6.3
    CVE-2024-22358

    IBM UrbanCode Deploy session fixation

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another u…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 4.3
    CVE-2024-22339

    IBM UrbanCode Deploy information disclosure

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfuscation of sensitive values from some lo…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 4.4
    CVE-2024-22334

    IBM UrbanCode Deploy improper privilege control

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 6.1
    CVE-2024-22359

    IBM UrbanCode Deploy cross-site scripting

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…

    IBM UrbanCode Deploy DevOps Deploy
  • Medium 6.2
    CVE-2024-22331

    IBM UrbanCode Deploy information disclosure

    IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when installing the Windows agent. IBM X-Forc…

    IBM UrbanCode Deploy DevOps Deploy