CVE-2020-4202: IBM Urbancode Deploy

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.

Affected products

• IBM Urbancode Deploy: from 7.0.3.0, before 7.0.3.4 (fixed in 7.0.3.4); from 7.0.4.0, before 7.0.4.3 (fixed in 7.0.4.3)

Published 2020-04-23. Last modified 2026-06-17.