What’s Vulnerable › Products

IBM UrbanCode Deploy vulnerabilities

66 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your IBM UrbanCode Deploy version is affected

Latest IBM UrbanCode Deploy vulnerabilities

• CVE-2026-10569 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability (CVSS 4.3)
• CVE-2026-12086 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability (CVSS 5.5)
• CVE-2026-12085 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability (CVSS 6.5)
• CVE-2025-36360 — IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability (CVSS 5.0)
• CVE-2025-1998 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure (CVSS 5.5)
• CVE-2025-1997 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection (CVSS 4.6)
• CVE-2024-56469 — IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication (CVSS 6.3)
• CVE-2024-55904 — IBM DevOps Deploy / IBM UrbanCode Deploy command injection (CVSS 7.2)
• CVE-2024-54176 — IBM UrbanCode Deploy missing authentication (CVSS 6.5)
• CVE-2024-45091 — IBM UrbanCode Deploy information disclosure (CVSS 5.5)
• CVE-2024-51472 — IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection (CVSS 3.1)
• CVE-2024-28781 — IBM UrbanCode Deploy cross-site scripting (CVSS 5.4)
• CVE-2024-22359 — IBM UrbanCode Deploy cross-site scripting (CVSS 6.1)
• CVE-2024-22358 — IBM UrbanCode Deploy session fixation (CVSS 8.8)
• CVE-2024-22339 — IBM UrbanCode Deploy information disclosure (CVSS 4.3)
• CVE-2024-22334 — IBM UrbanCode Deploy improper privilege control (CVSS 4.4)
• CVE-2024-22331 — IBM UrbanCode Deploy information disclosure (CVSS 5.5)
• CVE-2023-47161 — IBM UrbanCode Deploy denial of service (CVSS 6.5)
• CVE-2023-42013 — IBM UrbanCode Deploy information disclosure (CVSS 5.3)
• CVE-2023-42012 — IBM UrbanCode Deploy denial of service (CVSS 5.5)
• CVE-2023-42015 — IBM UrbanCode Deploy HTML injection (CVSS 4.3)
• CVE-2023-40376 — IBM UrbanCode Deploy (UCD) improper authentication controls (CVSS 6.5)
• CVE-2022-43877 — IBM UrbanCode Deploy (UCD) information disclosure (CVSS 5.1)
• CVE-2022-46771 — IBM UrbanCode Deploy (UCD) cross-site scripting (CVSS 4.6)
• CVE-2022-40751 — IBM UrbanCode Deploy information disclosure (CVSS 4.9)