7.2
High
CVE-2024-55904 IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through…
Description
IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 7.3 | 7.3 → 7.3.2.9 | No fix stated |
| UrbanCode Deploy 7.2 | 7.2 → 7.2.3.14 | No fix stated |
| UrbanCode Deploy 7.1 | 7.1 → 7.1.2.21 | No fix stated |
| UrbanCode Deploy 7.0 | 7.0 → 7.0.5.25 | No fix stated |
| DevOps Deploy 8.1 | 8.1 → 8.1.0.0 | No fix stated |
| DevOps Deploy 8.0 | 8.0 → 8.0.1.4 | No fix stated |
Other CVEs of UrbanCode Deploy
The 45 CVEs of UrbanCode Deploy →
CVE-2025-36162
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain…
4.3
Medium
CVE-2025-1998
IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0…
5.5
Medium
CVE-2025-1997
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 /…
5.4
Medium
CVE-2024-56469
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy…
6.3
Medium