CVE-2020-4848: IBM Urbancode Deploy

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 190293.

Affected products

• IBM Urbancode Deploy: version 6.2.7.9 only; version 7.0.5.4 only; version 7.1.1.1 only

Published 2021-03-30. Last modified 2026-06-17.