Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

20 records in Devops Deploy · all components

TI-2024-14937 CVE-2024-22358 · GHSA-46mj-7xpv-pprw

IBM UrbanCode Deploy session fixation

Priority LOW 38

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an auth…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2024-04-12 No fix listed CWE-613
TI-2024-36965 CVE-2024-55904 · GHSA-qh3r-9hx2-h8wx

IBM DevOps Deploy / IBM UrbanCode Deploy command injection

Priority LOW 35

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated at…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00692 Published 2025-02-14 No fix listed CWE-78
TI-2026-10409 CVE-2026-12084 · GHSA-fq2g-wf56-3prg

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive…

Priority LOW 32

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2026-06-30 No fix listed CWE-942
TI-2026-10410 CVE-2026-12085 · GHSA-6qv6-3qwf-mmv5

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of…

Priority LOW 29

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00379 Published 2026-06-30 No fix listed CWE-201
TI-2024-36282 CVE-2024-54176 · GHSA-6f8w-f2r8-4fhv

IBM UrbanCode Deploy missing authentication

Priority LOW 29

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00278 Published 2025-02-08 No fix listed CWE-306
TI-2024-37380 CVE-2024-56469 · GHSA-3jrc-j5p2-v7xj

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication

Priority LOW 28

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potenti…

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00262 Published 2025-03-27 No fix listed CWE-306
TI-2026-10411 CVE-2026-12086 · GHSA-54jp-jq2r-6hfw

Sensitive information in log files in IBM UCD - IBM UrbanCode Deploy

Priority LOW 27

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensit…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00145 Published 2026-06-30 No fix listed CWE-532
TI-2024-14938 CVE-2024-22359 · GHSA-3cpf-72w5-65j4

IBM UrbanCode Deploy cross-site scripting

Priority LOW 27

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-04-12 No fix listed CWE-79
TI-2024-14912 CVE-2024-22331 · GHSA-3gjv-wq7v-458m

IBM UrbanCode Deploy information disclosure

Priority LOW 27

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when i…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00188 Published 2024-02-06 No fix listed CWE-200
TI-2025-01738 CVE-2025-1998 · GHSA-wvfh-rj9m-fpc6

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure

Priority LOW 24

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00177 Published 2025-03-27 No fix listed CWE-532
TI-2025-01737 CVE-2025-1997 · GHSA-2pv7-j3wp-jhrp

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection

Priority LOW 24

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00288 Published 2025-03-27 No fix listed CWE-80
TI-2024-19008 CVE-2024-28781 · GHSA-vgjq-3m42-w385

IBM UrbanCode Deploy cross-site scripting

Priority LOW 24

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00276 Published 2024-05-10 No fix listed CWE-79
TI-2025-24806 CVE-2025-36360 · GHSA-x855-7vwp-xj8v

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability

Priority LOW 22

IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00189 Published 2025-12-15 No fix listed CWE-613
TI-2024-14915 CVE-2024-22334 · GHSA-qmmh-x7m4-pr56

IBM UrbanCode Deploy improper privilege control

Priority LOW 21

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when d…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00436 Published 2024-04-12 No fix listed CWE-732
TI-2026-09091 CVE-2026-10569 · GHSA-6vc6-wc98-c6qc

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability

Priority LOW 20

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-07-30 No fix listed CWE-200
TI-2025-24738 CVE-2025-36162 · GHSA-xpxw-r4r3-r7qf

IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure

Priority LOW 20

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00235 Published 2025-09-02 No fix listed CWE-497
TI-2024-14920 CVE-2024-22339 · GHSA-75rx-c73c-98q9

IBM UrbanCode Deploy information disclosure

Priority LOW 20

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfus…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00443 Published 2024-04-12 No fix listed CWE-532
TI-2024-34394 CVE-2024-51472 · GHSA-fj69-f9qp-jh4f

IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection

Priority LOW 15

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.0026 Published 2025-01-06 No fix listed CWE-80
Open these records in search →