CVE-2024-51472CWE-80

IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection

Low · published January 6, 2025

CVSS v3.1
3.1
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-01-06T16:38Z
EPSS history
Timeline
  • 06 JAN 16:38Z
    IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection
    cvelistv5