What’s Vulnerable › Products

IBM DevOps Deploy vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your IBM DevOps Deploy version is affected

Latest IBM DevOps Deploy vulnerabilities

• CVE-2026-78658 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability (CVSS 6.5)
• CVE-2026-10569 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability (CVSS 4.3)
• CVE-2026-12086 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability (CVSS 5.5)
• CVE-2026-12085 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability (CVSS 6.5)
• CVE-2026-12084 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains (CVSS 7.5)
• CVE-2025-36360 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability (CVSS 5.0)
• CVE-2025-14148 — IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability (CVSS 6.5)
• CVE-2025-13489 — IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information (CVSS 5.9)
• CVE-2025-36162 — IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure (CVSS 4.3)
• CVE-2025-1998 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure (CVSS 5.5)
• CVE-2025-1997 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection (CVSS 4.6)
• CVE-2024-56469 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication (CVSS 6.3)
• CVE-2024-55904 — IBM DevOps Deploy / IBM UrbanCode Deploy command injection (CVSS 7.2)
• CVE-2024-54176 — IBM UrbanCode Deploy missing authentication (CVSS 6.5)
• CVE-2024-51472 — IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection (CVSS 3.1)
• CVE-2024-28781 — IBM UrbanCode Deploy cross-site scripting (CVSS 5.4)
• CVE-2024-22359 — IBM UrbanCode Deploy cross-site scripting (CVSS 6.1)
• CVE-2024-22358 — IBM UrbanCode Deploy session fixation (CVSS 8.8)
• CVE-2024-22339 — IBM UrbanCode Deploy information disclosure (CVSS 4.3)
• CVE-2024-22334 — IBM UrbanCode Deploy improper privilege control (CVSS 4.4)
• CVE-2024-22331 — IBM UrbanCode Deploy information disclosure (CVSS 5.5)