IBM UrbanCode Velocity 4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:urbancode_velocity:4.0.0:*:*:*:*:*:*:*
part: a version: 4.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Urbancode Velocity (bbf0ff3b-133d-58d4-bc9e-540325515351) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22349 |
vulnerable | 2026-06-08 06:29:34.627331 |
IBM UrbanCode Velocity information disclosure
MEDIUM (4)
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.
Published: 2025-01-20T17:42:37.885Z
Updated: 2025-01-21T14:45:14.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22348 |
vulnerable | 2026-06-08 06:29:34.626583 |
IBM UrbanCode Velocity cross-origin resource sharing
MEDIUM (5.3)
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.
Published: 2025-01-20T17:40:31.965Z
Updated: 2025-01-21T14:47:02.451Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22347 |
vulnerable | 2026-06-08 06:29:34.623546 |
IBM UrbanCode Velocity information disclosure
MEDIUM (5.9)
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2025-01-20T17:41:43.506Z
Updated: 2025-01-21T14:46:25.668Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.