CVE-2025-13489: IBM Devops Deploy

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected products

• IBM Devops Deploy: from 8.1.0.0, before 8.1.2.4 (fixed in 8.1.2.4)

Published 2025-12-15. Last modified 2026-10-07.