IBM Devops Deploy 8.0.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:devops_deploy:8.0.0.0:*:*:*:*:*:*:*
part: a version: 8.0.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Devops Deploy (9b6ec67d-7e92-564c-b507-e2f0928cd078) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1998 |
vulnerable | 2026-06-08 07:08:38.733435 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
MEDIUM (5.5)
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T14:41:56.148Z
Updated: 2025-09-01T01:01:35.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1997 |
vulnerable | 2026-06-08 07:08:38.722916 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
MEDIUM (5.4)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-03-27T14:39:48.719Z
Updated: 2025-09-29T18:09:14.462Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56469 |
vulnerable | 2026-06-08 06:54:17.887809 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
MEDIUM (6.3)
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Published: 2025-03-27T14:32:51.723Z
Updated: 2025-09-01T10:14:14.162Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51472 |
vulnerable | 2026-06-08 06:52:12.086415 |
IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection
LOW (3.1)
IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-01-06T16:38:11.973Z
Updated: 2025-08-27T21:33:04.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22358 |
vulnerable | 2026-06-08 06:29:34.650395 |
IBM UrbanCode Deploy session fixation
MEDIUM (6.3)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.
Published: 2024-04-12T16:53:43.381Z
Updated: 2024-08-01T22:43:34.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22331 |
vulnerable | 2026-06-08 06:29:34.562955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.