CVE-2022-35716: IBM Urbancode Deploy

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.

Affected products

• IBM Urbancode Deploy: from 6.2.0.0, before 6.2.7.17 (fixed in 6.2.7.17); from 7.0.0.0, before 7.0.5.12 (fixed in 7.0.5.12); from 7.1.0.0, before 7.1.2.8 (fixed in 7.1.2.8); from 7.2.0.0, before 7.2.3.1 (fixed in 7.2.3.1)

Published 2022-08-01. Last modified 2026-06-17.