← CVE Intelligence

CVE-2024-51472

IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection PUBLISHED

Description (CNA)

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

Affected (CNA)

Vendor / productVersions
IBM / DevOps Deployaffected 8.0 through 8.0.1.3
IBM / UrbanCode Deployaffected 7.2 through 7.2.3.13; affected 7.3 through 7.3.2.8

CWE

CWE-80

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.