Devops Velocity (Hcltech) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 89 known versions, newest CVE from 2026-04-13. Vendor: Hcltech.

CVEs of Devops Velocity

• CVE-2025-31991 - CVSS 9.8 (critical), 2026-04-13: Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful…
• CVE-2024-22348 - CVSS 7.5 (high), 2025-01-20: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry…
• CVE-2024-22347 - CVSS 7.5 (high), 2025-01-20: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to…
• CVE-2024-22349 - CVSS 4 (medium), 2025-01-20: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the…