IBM Devops Deploy vulnerabilities

20 CVEs affecting IBM Devops Deploy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10569, published 2026-07-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-55904, published 2025-02-14. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote…
CVE-2024-22339, published 2024-04-12. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due…
CVE-2024-22334, published 2024-04-12. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation…
CVE-2024-22358, published 2024-04-12. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout…
CVE-2026-12085, published 2026-06-30. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive…
CVE-2024-22359, published 2024-04-12. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting. This…
CVE-2025-14148, published 2025-12-15. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.
CVE-2026-10569, published 2026-07-30. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an…
CVE-2025-1997, published 2025-03-27. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to…
CVE-2024-54176, published 2025-02-08. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an…

Latest

CVE-2026-12086, published 2026-06-30. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy…
CVE-2026-12084, published 2026-06-30. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive…
CVE-2025-36360, published 2025-12-15. Medium severity, CVSS 5.0. EPSS: 0.2% chance of exploitation in the next 30 days. IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a…
CVE-2025-13489, published 2025-12-15. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2025-36162, published 2025-09-02. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.
CVE-2025-1998, published 2025-03-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication…