Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*

part: a version: 8.1.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDevops Deploy (9b6ec67d-7e92-564c-b507-e2f0928cd078)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1998 vulnerable 2026-06-08 07:08:38.733592 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
MEDIUM (5.5)
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T14:41:56.148Z
Updated: 2025-09-01T01:01:35.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1997 vulnerable 2026-06-08 07:08:38.724936 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
MEDIUM (5.4)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-03-27T14:39:48.719Z
Updated: 2025-09-29T18:09:14.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56469 vulnerable 2026-06-08 06:54:17.888646 IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
MEDIUM (6.3)
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Published: 2025-03-27T14:32:51.723Z
Updated: 2025-09-01T10:14:14.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55904 vulnerable 2026-06-08 06:54:17.233579 IBM DevOps Deploy / IBM UrbanCode Deploy command injection
HIGH (7.2)
IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.
Published: 2025-02-14T03:23:49.065Z
Updated: 2025-02-14T14:46:04.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54176 vulnerable 2026-06-08 06:54:16.153978 IBM UrbanCode Deploy missing authentication
MEDIUM (4.3)
IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.
Published: 2025-02-08T16:15:40.041Z
Updated: 2025-02-22T22:12:32.094Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.