CVE-2020-4482: IBM Urbancode Deploy

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.

Affected products

• IBM Urbancode Deploy: version 6.2.7.3 only; version 6.2.7.4 only; version 7.0.3.0 only; version 7.0.4.0 only

Published 2020-11-06. Last modified 2026-06-17.