5.3
Medium
CVE-2023-40376 IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations…
Description
IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 7.3 | 7.3 → 7.3.2.0 | No fix stated |
| UrbanCode Deploy 7.2 | 7.2 → 7.2.3.5 | No fix stated |
| UrbanCode Deploy 7.1 | 7.1 → 7.1.2.12 | No fix stated |
Other CVEs of UrbanCode Deploy
The 45 CVEs of UrbanCode Deploy →
CVE-2025-36162
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain…
4.3
Medium
CVE-2025-1998
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0…
5.5
Medium
CVE-2025-1997
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 /…
5.4
Medium
CVE-2024-56469
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy…
6.3
Medium