medium4.3
CVE-2023-42015
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection.
Impact
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. IBM X-Force ID: 265512.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Urbancode Deploy | from 7.1.0.0 before 7.1.2.15 from 7.2.0.0 before 7.2.3.8 from 7.3.0.0 before 7.3.2.3 |