Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1998 vulnerable 2026-06-08 07:08:38.732755 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
MEDIUM (5.5)
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T14:41:56.148Z
Updated: 2025-09-01T01:01:35.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1997 vulnerable 2026-06-08 07:08:38.717351 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
MEDIUM (5.4)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-03-27T14:39:48.719Z
Updated: 2025-09-29T18:09:14.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56469 vulnerable 2026-06-08 06:54:17.883402 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
MEDIUM (6.3)
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Published: 2025-03-27T14:32:51.723Z
Updated: 2025-09-01T10:14:14.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45091 vulnerable 2026-06-08 06:45:54.561587 IBM UrbanCode Deploy information disclosure
MEDIUM (6.2)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
Published: 2025-01-21T00:41:45.398Z
Updated: 2025-01-21T16:41:10.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.