Priority LOW 20
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00301 · Published 2026-07-30 · No fix listed CWE-200
Priority LOW 29
IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00379 · Published 2026-06-30 · No fix listed CWE-201
Priority LOW 27
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensit…
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00145 · Published 2026-06-30 · No fix listed CWE-532
Priority LOW 22
IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http…
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00189 · Published 2025-12-15 · No fix listed CWE-613
Priority LOW 24
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2025-03-27 · No fix listed CWE-532
Priority LOW 24
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00288 · Published 2025-03-27 · No fix listed CWE-80
Priority LOW 28
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potenti…
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00262 · Published 2025-03-27 · No fix listed CWE-306
Priority LOW 35
IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated at…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00692 · Published 2025-02-14 · No fix listed CWE-78
Priority LOW 29
IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00278 · Published 2025-02-08 · No fix listed CWE-306
Priority LOW 27
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00204 · Published 2025-01-21 · No fix listed CWE-532
Priority LOW 15
IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.0026 · Published 2025-01-06 · No fix listed CWE-80
Priority LOW 24
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00276 · Published 2024-05-10 · No fix listed CWE-79
Priority LOW 38
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an auth…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00411 · Published 2024-04-12 · No fix listed CWE-613
Priority LOW 20
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfus…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00443 · Published 2024-04-12 · No fix listed CWE-532
Priority LOW 21
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when d…
CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.00436 · Published 2024-04-12 · No fix listed CWE-732
Priority LOW 27
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0037 · Published 2024-04-12 · No fix listed CWE-79
Priority LOW 27
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when i…
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00188 · Published 2024-02-06 · No fix listed CWE-200
Priority LOW 30
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00808 · Published 2023-12-19 · No fix listed CWE-20
Priority LOW 27
An IBM UrbanCode Deploy Agent 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00226 · Published 2023-12-19 · No fix listed CWE-20
Priority LOW 25
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the brows…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00713 · Published 2023-12-19 · No fix listed CWE-209
Priority LOW 21
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00573 · Published 2023-12-19 · No fix listed CWE-79
Priority LOW 30
IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authenticati…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00554 · Published 2023-10-04 · No fix listed CWE-862
Priority LOW 24
IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2023-05-06 · No fix listed CWE-922
Priority LOW 21
IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00396 · Published 2022-12-20 · Fixed in 6.2.7.18, 7.0.5.13 +2 CWE-79
Priority LOW 24
IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permission…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00664 · Published 2022-11-17 · Fixed in 6.2.7.17, 7.0.5.12 +2 CWE-522
Load more