Advisories · Technology

IBM DevOps Plan.

Every CVE that names IBM DevOps Plan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4096 CVE record

CVSS 6.5 Medium

A vulnerability has been identified in IBM DevOps Plan that allows a Host Header Injection attack due to improper handling of the Host header in HTTP requests.
- IBM DevOps Plan
- CWE-644
Not analysed yet 11 Jun 2026
CVE-2025-36363 CVE record

CVSS 5.9 Medium

IBM DevOps Plan is vulnerable to Excessive Authentication Attempts
- IBM DevOps Plan
- Authentication bypass
Not analysed yet 3 Mar 2026
CVE-2025-36364 CVE record

CVSS 6.2 Medium

IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
- IBM DevOps Plan
- CWE-525
Not analysed yet 3 Mar 2026