Known vulnerabilities in IBM DevOps Plan
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-4096 | IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by… | 6.5 Medium | Jun 11, 2026 |
| CVE-2025-36363 | IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to… | 5.9 Medium | Mar 3, 2026 |
| CVE-2025-36364 | IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on… | 6.2 Medium | Mar 3, 2026 |