IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Ibm |
|
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-8500 | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7229035 |
|
History
Mon, 29 Sep 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. |
Thu, 14 Aug 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:* |
Thu, 27 Mar 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 27 Mar 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. | |
| Title | IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection | |
| First Time appeared |
Ibm
Ibm devops Deploy Ibm urbancode Deploy |
|
| Weaknesses | CWE-80 | |
| CPEs | cpe:2.3:a:ibm:devops_deploy:8.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:devops_deploy:8.0.1.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.0.5.25:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.1.2.21:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.2.3.14:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.3.2.9:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:7.3:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm devops Deploy Ibm urbancode Deploy |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2025-09-29T18:09:14.462Z
Reserved: 2025-03-05T16:10:34.631Z
Link: CVE-2025-1997
Vulnrichment
Updated: 2025-03-27T15:09:52.667Z
NVD
Status : Modified
Published: 2025-03-27T15:15:54.550
Modified: 2025-09-29T18:15:31.250
Link: CVE-2025-1997
Redhat
No data.
OpenCVE Enrichment
No data.