UD
Product
UrbanCode Deploy
67
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 48Low 2
Watch
Add UrbanCode Deploy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22358 | 8.8 | Apr 12 | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate… Affected: 7.0.0.0 before 7.0.5.21; 7.1.0.0 before 7.1.2.17; 7.2.0.0 before 7.2.3.10; 7.3.0.0 before 7.3.2.5 |
| CVE-2022-22315 | 8.8 | Apr 27 | IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privileges due to improper handling of permissions Affected: 6.2.7.0 before 6.2.7.15; 7.0.3.0 before 7.0.5.10; 7.1.0.0 before 7.1.2.6; 7.2.0.0 before 7.2.2.1 |
| CVE-2020-4202 | 8.8 | Apr 23 | IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE) Affected: 7.0.3.0 before 7.0.3.4; 7.0.4.0 before 7.0.4.3 |
| CVE-2014-8900 | 8.8 | Aug 28 | Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier Affected: through 6.0.1.6; through 6.1.0.7; through 6.1.1.1 |
| CVE-2020-4481 | 8.2 | Aug 5 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 6.2.7.3; 6.2.7.4; 7.0.3.0; 7.0.4.0 |
| CVE-2016-0271 | 8.2 | Jul 8 | The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which… Affected: 6.0; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +31 more |
| CVE-2017-1149 | 8.1 | Apr 25 | IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 6.0; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +32 more |
| CVE-2016-0267 | 7.7 | Jun 29 | IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property… Affected: 6.0; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +30 more |
| CVE-2021-39082 | 7.5 | Apr 29 | IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.0.3.4.1044170; 7.0.4.1.1036185; 7.0.4.2.1038002; 7.0.4.3.1044169; 7.0.5.0.1041488; 7.0.5.1.1044461; +15 more |
| CVE-2022-22327 | 7.5 | Apr 1 | IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 7.0.5.3 before 7.0.5.9; 7.1.0.0 before 7.1.2.5 |
| CVE-2016-9008 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent Affected: 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +34 more |
| CVE-2016-6068 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties Affected: 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +34 more |
| CVE-2016-2942 | 7.5 | Feb 1 | IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent… Affected: 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; +34 more |
| CVE-2024-55904 | 7.2 | Feb 14 | IBM DevOps Deploy / IBM UrbanCode Deploy command injection Affected: 7.0 through 7.0.5.25; 7.1 through 7.1.2.21; 7.2 through 7.2.3.14; 7.3 through 7.3.2.9 |
Showing 14