CVE-2023-42015

IBM UrbanCode Deploy HTML injection

Medium · published December 19, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. IBM X-Force ID: 265512.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00573 · 46.6th percentile
Published
2023-12-19T02:12Z
EPSS history
Timeline
  • 19 DEC 02:12Z
    IBM UrbanCode Deploy HTML injection
    cvelistv5