Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

66 records

Priority LOW 20

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-07-30 No fix listed CWE-200
Priority LOW 29

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00379 Published 2026-06-30 No fix listed CWE-201
Priority LOW 27

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensit…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00145 Published 2026-06-30 No fix listed CWE-532
Priority LOW 22

IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00189 Published 2025-12-15 No fix listed CWE-613
Priority LOW 24

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00177 Published 2025-03-27 No fix listed CWE-532
Priority LOW 24

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00288 Published 2025-03-27 No fix listed CWE-80
Priority LOW 28

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potenti…

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00262 Published 2025-03-27 No fix listed CWE-306
Priority LOW 35

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated at…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00692 Published 2025-02-14 No fix listed CWE-78
TI-2024-36282 CVE-2024-54176 · GHSA-6f8w-f2r8-4fhv

IBM UrbanCode Deploy missing authentication

Priority LOW 29

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00278 Published 2025-02-08 No fix listed CWE-306
TI-2024-30195 CVE-2024-45091 · GHSA-ch3p-w3gc-7p42

IBM UrbanCode Deploy information disclosure

Priority LOW 27

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00204 Published 2025-01-21 No fix listed CWE-532
Priority LOW 15

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.0026 Published 2025-01-06 No fix listed CWE-80
TI-2024-19008 CVE-2024-28781 · GHSA-vgjq-3m42-w385

IBM UrbanCode Deploy cross-site scripting

Priority LOW 24

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00276 Published 2024-05-10 No fix listed CWE-79
TI-2024-14937 CVE-2024-22358 · GHSA-46mj-7xpv-pprw

IBM UrbanCode Deploy session fixation

Priority LOW 38

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an auth…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2024-04-12 No fix listed CWE-613
TI-2024-14920 CVE-2024-22339 · GHSA-75rx-c73c-98q9

IBM UrbanCode Deploy information disclosure

Priority LOW 20

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfus…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00443 Published 2024-04-12 No fix listed CWE-532
Priority LOW 21

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when d…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00436 Published 2024-04-12 No fix listed CWE-732
TI-2024-14938 CVE-2024-22359 · GHSA-3cpf-72w5-65j4

IBM UrbanCode Deploy cross-site scripting

Priority LOW 27

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-04-12 No fix listed CWE-79
TI-2024-14912 CVE-2024-22331 · GHSA-3gjv-wq7v-458m

IBM UrbanCode Deploy information disclosure

Priority LOW 27

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when i…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00188 Published 2024-02-06 No fix listed CWE-200
TI-2023-25487 CVE-2023-47161 · GHSA-j7c4-q4f5-fpfw

IBM UrbanCode Deploy denial of service

Priority LOW 30

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00808 Published 2023-12-19 No fix listed CWE-20
TI-2023-22389 CVE-2023-42012 · GHSA-wvhj-q93v-gc3x

IBM UrbanCode Deploy denial of service

Priority LOW 27

An IBM UrbanCode Deploy Agent 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00226 Published 2023-12-19 No fix listed CWE-20
TI-2023-22390 CVE-2023-42013 · GHSA-hwgp-86hh-xvg8

IBM UrbanCode Deploy information disclosure

Priority LOW 25

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the brows…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00713 Published 2023-12-19 No fix listed CWE-209
TI-2023-22392 CVE-2023-42015 · GHSA-9m37-9693-4vqx

IBM UrbanCode Deploy HTML injection

Priority LOW 21

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00573 Published 2023-12-19 No fix listed CWE-79
Priority LOW 30

IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authenticati…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00554 Published 2023-10-04 No fix listed CWE-862
Priority LOW 24

IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0019 Published 2023-05-06 No fix listed CWE-922
Priority LOW 21

IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00396 Published 2022-12-20 Fixed in 6.2.7.18, 7.0.5.13 +2 CWE-79
TI-2022-19378 CVE-2022-40751 · GHSA-q778-q498-8cqq

IBM UrbanCode Deploy information disclosure

Priority LOW 24

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permission…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00664 Published 2022-11-17 Fixed in 6.2.7.17, 7.0.5.12 +2 CWE-522
Load more