UD
Product
UrbanCode Deploy
67
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 48Low 2
Watch
Add UrbanCode Deploy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22334 | 4.4 | Apr 12 | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to… Affected: 7.0.0.0 before 7.0.5.21; 7.1.0.0 before 7.1.2.17; 7.2.0.0 before 7.2.3.10 |
| CVE-2022-22366 | 4.4 | Jul 1 | IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user Affected: 6.2.7.15; 7.0.5.10; 7.1.2.6; 7.2.2.1 |
| CVE-2026-10569 | 4.3 | Jul 30 | IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability Affected: 7.2.0.0 before 7.2.3.24; 7.3.0.0 before 7.3.2.19 |
| CVE-2025-36162 | 4.3 | Sep 2 | IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure Affected: 8.1 through 8.1.2.1 |
| CVE-2024-22339 | 4.3 | Apr 12 | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a… Affected: 7.0.0.0 before 7.0.5.21; 7.1.0.0 before 7.1.2.17; 7.2.0.0 before 7.2.3.10; 7.3.0.0 before 7.3.2.5 |
| CVE-2023-42015 | 4.3 | Dec 19 | IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection Affected: 7.1.0.0 before 7.1.2.15; 7.2.0.0 before 7.2.3.8; 7.3.0.0 before 7.3.2.3 |
| CVE-2021-29711 | 4.3 | Jul 8 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain… Affected: All versions, or not specified |
| CVE-2020-4484 | 4.3 | Nov 6 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticated user that could be used in further attacks against the… Affected: 6.2.7.3; 6.2.7.4; 7.0.3.0; 7.0.4.0 |
| CVE-2020-4483 | 4.3 | Nov 6 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned… Affected: 6.2.7.3; 6.2.7.4; 7.0.3.0; 7.0.4.0 |
| CVE-2020-4260 | 4.3 | Apr 16 | IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes Affected: 6.2.7.3 before 6.2.7.7; 7.0.3.0 through 7.0.5.0 |
| CVE-2016-0373 | 4.3 | Aug 30 | IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining… Affected: 6.0 through 6.2.2.1 |
| CVE-2016-0320 | 4.3 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects Affected: 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +34 more |
| CVE-2016-0364 | 4.3 | Jul 1 | IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which… Affected: 6.0; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +30 more |
| CVE-2024-51472 | 3.1 | Jan 6 | IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection Affected: 7.2 through 7.2.3.13; 7.3 through 7.3.2.8 |
| CVE-2019-4666 | 2.3 | Feb 13 | IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certain secure values in documents Affected: through 7.0.3 |
| CVE-2015-4964 | – | Oct 6 | IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users… Affected: 6.0; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +14 more |
| CVE-2014-6074 | – | Sep 10 | IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page Affected: 6.1.0.2 |