CVE-2024-51472

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

Score

CVSS 3.1 3.1 Low

Status

Analyzed - psirt@us.ibm.com

Published

2025-01-06

Last modified

2025-08-27

Weaknesses

CWE-79, CWE-80

Affected products

• Devops Deploy (Ibm)
• Urbancode Deploy (Ibm)

References

• https://www.ibm.com/support/pages/node/7177856