Ucd Ibm Devops Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:ucd___ibm_devops_deploy:8.1:*:*:*:*:*:*:*
part: a version: 8.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Ucd Ibm Devops Deploy (a44b0f01-4062-59fe-b4cb-ec144e6234ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12086 |
vulnerable | 2026-07-29 00:23:31.965841 |
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability
MEDIUM (6.2)
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 stores potentially sensitive information in log files that could be read by a local user.
Published: 2026-06-30T19:36:28.096Z
Updated: 2026-07-01T13:24:38.890Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12085 |
vulnerable | 2026-07-29 00:23:31.957451 |
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability
MEDIUM (6.5)
IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Published: 2026-06-30T19:38:19.293Z
Updated: 2026-07-01T14:01:30.936Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12084 |
vulnerable | 2026-07-29 00:23:31.932290 |
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains
MEDIUM (5.4)
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.
Published: 2026-06-30T19:39:24.786Z
Updated: 2026-07-01T12:55:10.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36360 |
vulnerable | 2026-06-08 07:21:01.625643 |
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability
MEDIUM (5)
IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated, potentially enabling unauthorized access under certain network conditions.
Published: 2025-12-15T19:38:57.832Z
Updated: 2025-12-15T20:30:18.476Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14148 |
vulnerable | 2026-06-08 07:06:33.721565 |
IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability
MEDIUM (6.5)
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.
Published: 2025-12-15T19:43:07.880Z
Updated: 2025-12-15T20:27:13.721Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13489 |
vulnerable | 2026-06-08 07:04:32.325710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.