Advisories · Technology

IBM UrbanCode Deploy.

Every CVE that names IBM UrbanCode Deploy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36162 CVE record

CVSS 4.3 Medium

IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- Information disclosure
Not analysed yet 2 Sept 2025
CVE-2025-1998 CVE record

CVSS 5.5 Medium

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Information disclosure
Not analysed yet 27 Mar 2025
CVE-2025-1997 CVE record

CVSS 5.4 Medium

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2025
CVE-2024-56469 CVE record

CVSS 6.3 Medium

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Authentication bypass
Not analysed yet 27 Mar 2025
CVE-2024-55904 CVE record

CVSS 7.2 High

IBM DevOps Deploy / IBM UrbanCode Deploy command injection
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Command injection
Not analysed yet 14 Feb 2025
CVE-2024-54176 CVE record

CVSS 4.3 Medium

IBM UrbanCode Deploy missing authentication
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Authentication bypass
Not analysed yet 8 Feb 2025
CVE-2024-45091 CVE record

CVSS 6.2 Medium

IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- Information disclosure
Not analysed yet 21 Jan 2025
CVE-2024-51472 CVE record

CVSS 3.1 Low

IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection
- IBM DevOps Deploy
- IBM UrbanCode Deploy
- Cross-site scripting (XSS)
Not analysed yet 6 Jan 2025
CVE-2024-28781 CVE record

CVSS 5.4 Medium

IBM UrbanCode Deploy cross-site scripting
- IBM UrbanCode Deploy
- Cross-site scripting (XSS)
Not analysed yet 10 May 2024
CVE-2024-22358 CVE record

CVSS 6.3 Medium

IBM UrbanCode Deploy session fixation
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Authentication bypass
Not analysed yet 12 Apr 2024
CVE-2024-22339 CVE record

CVSS 4.3 Medium

IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Information disclosure
Not analysed yet 12 Apr 2024
CVE-2024-22334 CVE record

CVSS 4.4 Medium

IBM UrbanCode Deploy improper privilege control
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Broken access control
Not analysed yet 12 Apr 2024
CVE-2024-22359 CVE record

CVSS 6.1 Medium

IBM UrbanCode Deploy cross-site scripting
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2024-22331 CVE record

CVSS 6.2 Medium

IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- IBM DevOps Deploy
- Information disclosure
Not analysed yet 6 Feb 2024
CVE-2023-47161 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy denial of service
- IBM UrbanCode Deploy
- CWE-20
Not analysed yet 19 Dec 2023
CVE-2023-42012 CVE record

CVSS 6.2 Medium

IBM UrbanCode Deploy denial of service
- IBM UrbanCode Deploy
- CWE-20
Not analysed yet 19 Dec 2023
CVE-2023-42013 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- Information disclosure
Not analysed yet 19 Dec 2023
CVE-2023-42015 CVE record

CVSS 4.3 Medium

IBM UrbanCode Deploy HTML injection
- IBM UrbanCode Deploy
Not analysed yet 19 Dec 2023
CVE-2023-40376 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy (UCD) improper authentication controls
- IBM UrbanCode Deploy
- Broken access control
Not analysed yet 4 Oct 2023
CVE-2022-43877 CVE record

CVSS 5.1 Medium

IBM UrbanCode Deploy (UCD) information disclosure
- IBM UrbanCode Deploy
- Information disclosure
Not analysed yet 6 May 2023
CVE-2022-40751 CVE record

CVSS 4.9 Medium

IBM UrbanCode Deploy information disclosure
- IBM UrbanCode Deploy
- Hard-coded credentials
Not analysed yet 17 Nov 2022
CVE-2022-35716 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11…
- IBM UrbanCode Deploy
Not analysed yet 31 Jul 2022
CVE-2022-22367 CVE record

CVSS 4.0 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6…
- IBM UrbanCode Deploy
Not analysed yet 1 Jul 2022
CVE-2022-22366 CVE record

CVSS 4.9 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6…
- IBM UrbanCode Deploy
Not analysed yet 1 Jul 2022
CVE-2021-39082 CVE record

CVSS 5.9 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms…
- IBM UrbanCode Deploy
Not analysed yet 29 Apr 2022
CVE-2022-22315 CVE record

CVSS 5.0 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special…
- IBM UrbanCode Deploy
Not analysed yet 27 Apr 2022
CVE-2022-22327 CVE record

CVSS 5.9 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1…
- IBM UrbanCode Deploy
Not analysed yet 1 Apr 2022
CVE-2021-29711 CVE record

CVSS 4.9 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0…
- IBM UrbanCode Deploy
Not analysed yet 8 Jul 2021
CVE-2020-4944 CVE record

CVSS 5.1 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1…
- IBM UrbanCode Deploy
Not analysed yet 30 Mar 2021
CVE-2020-4884 CVE record

CVSS 6.2 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4…
- IBM UrbanCode Deploy
Not analysed yet 30 Mar 2021
CVE-2020-4848 CVE record

CVSS 5.4 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4…
- IBM UrbanCode Deploy
Not analysed yet 30 Mar 2021
CVE-2020-4484 CVE record

CVSS 4.3 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0…
- IBM UrbanCode Deploy
Not analysed yet 6 Nov 2020
CVE-2020-4483 CVE record

CVSS 4.3 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0…
- IBM UrbanCode Deploy
Not analysed yet 6 Nov 2020
CVE-2020-4482 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0…
- IBM UrbanCode Deploy
Not analysed yet 6 Nov 2020
CVE-2020-4481 CVE record

CVSS 8.2 High

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0…
- IBM UrbanCode Deploy
Not analysed yet 5 Aug 2020
CVE-2019-4667 CVE record

CVSS 5.9 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive…
- IBM UrbanCode Deploy
Not analysed yet 11 May 2020
CVE-2020-4202 CVE record

CVSS 5.0 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to…
- IBM UrbanCode Deploy
Not analysed yet 23 Apr 2020
CVE-2019-4668 CVE record

CVSS 6.2 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which…
- IBM UrbanCode Deploy
Not analysed yet 23 Apr 2020
CVE-2020-4260 CVE record

CVSS 3.1 Low

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain…
- IBM UrbanCode Deploy
Not analysed yet 16 Apr 2020
CVE-2019-4666 CVE record

CVSS 2.3 Low

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user…
- IBM UrbanCode Deploy
- IBM UrbanCode Build
Not analysed yet 13 Feb 2020
CVE-2016-0373 CVE record

CVSS 3.1 Low

IBM UrbanCode Deploy: IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read…
- IBM UrbanCode Deploy
Not analysed yet 30 Aug 2018
CVE-2017-1749 CVE record

CVSS 5.3 Medium

IBM UrbanCode Deploy: IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse…
- IBM UrbanCode Deploy
Not analysed yet 13 Aug 2018
CVE-2017-1752 CVE record

IBM UrbanCode Deploy: IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain…
- IBM UrbanCode Deploy
Not analysed yet 25 May 2018
CVE-2017-1493 CVE record

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects…
- IBM UrbanCode Deploy
Not analysed yet 9 Jan 2018
CVE-2017-1149 CVE record

IBM UrbanCode Deploy: IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service…
- IBM UrbanCode Deploy
Not analysed yet 25 Apr 2017