Devops Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Devops Deploy (9b6ec67d-7e92-564c-b507-e2f0928cd078) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36360 |
vulnerable | 2026-06-08 07:21:01.627012 |
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability
MEDIUM (5)
IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated, potentially enabling unauthorized access under certain network conditions.
Published: 2025-12-15T19:38:57.832Z
Updated: 2025-12-15T20:30:18.476Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36162 |
vulnerable | 2026-06-08 07:21:01.331123 |
IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure
MEDIUM (4.3)
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.
Published: 2025-09-02T18:52:08.189Z
Updated: 2025-09-02T19:46:21.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1998 |
vulnerable | 2026-06-08 07:08:38.733616 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
MEDIUM (5.5)
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T14:41:56.148Z
Updated: 2025-09-01T01:01:35.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1997 |
vulnerable | 2026-06-08 07:08:38.730647 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
MEDIUM (5.4)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-03-27T14:39:48.719Z
Updated: 2025-09-29T18:09:14.462Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14148 |
vulnerable | 2026-06-08 07:06:33.723588 |
IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability
MEDIUM (6.5)
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.
Published: 2025-12-15T19:43:07.880Z
Updated: 2025-12-15T20:27:13.721Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13489 |
vulnerable | 2026-06-08 07:04:32.327473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56469 |
vulnerable | 2026-06-08 06:54:17.889605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55904 |
vulnerable | 2026-06-08 06:54:17.233550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54176 |
vulnerable | 2026-06-08 06:54:16.153312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51472 |
vulnerable | 2026-06-08 06:52:12.091184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28781 |
vulnerable | 2026-06-08 06:33:27.309835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22359 |
vulnerable | 2026-06-08 06:29:34.655442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22358 |
vulnerable | 2026-06-08 06:29:34.654713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22339 |
vulnerable | 2026-06-08 06:29:34.585772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22334 |
vulnerable | 2026-06-08 06:29:34.570130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22331 |
vulnerable | 2026-06-08 06:29:34.562066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.