Urbancode Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:urbancode_deploy:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Urbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1998 |
vulnerable | 2026-06-08 07:08:38.732560 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
MEDIUM (5.5)
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T14:41:56.148Z
Updated: 2025-09-01T01:01:35.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1997 |
vulnerable | 2026-06-08 07:08:38.714470 |
IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
MEDIUM (5.4)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-03-27T14:39:48.719Z
Updated: 2025-09-29T18:09:14.462Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45091 |
vulnerable | 2026-06-08 06:45:54.559470 |
IBM UrbanCode Deploy information disclosure
MEDIUM (6.2)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
Published: 2025-01-21T00:41:45.398Z
Updated: 2025-01-21T16:41:10.360Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.