CVE-2023-42015

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Dec 19, 2023
Updated: Dec 27, 2023
CWE ID 79

Summary

CVE-2023-42015 is a vulnerability affecting IBM UrbanCode Deploy (UCD) versions 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2. An attacker can exploit this HTML injection vulnerability by embedding arbitrary HTML tags in the Web UI. This issue may result in sensitive information disclosure. IBM's X-Force has assigned the ID 265512 to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM UrbanCode Deploy

Affected Vendors

  • IBM Corporation

Advisories, Assessments, and Mitigations