CVE-2024-51472

3.1 lowEPSS 0.3%

Low (3.1) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

Severity

CVSS 3.1

3.1 low

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-80
Published: 2025-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:devops_deploy
ibm:urbancode_deploy

References

https://www.ibm.com/support/pages/node/7177856

Check your stack JSON