IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1
is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7229035 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Sep 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. |
14 Aug 2025, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| First Time |
Ibm devops Deploy
Ibm Ibm urbancode Deploy |
|
| CPE | cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:* |
|
| References | () https://www.ibm.com/support/pages/node/7229035 - Vendor Advisory |
27 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-27 15:15
Updated : 2025-09-29 18:15
NVD link : CVE-2025-1997
Mitre link : CVE-2025-1997
CVE.ORG link : CVE-2025-1997
JSON object : View
Products Affected
ibm
- devops_deploy
- urbancode_deploy
CWE
CWE-80
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)