# Ibm Urbancode Deploy


- [CVE-2016-8938](https://insights.sbomify.com/CVE-2016-8938/): File upload in UrbanCode Deploy (critical 10.0)
- [CVE-2014-8900](https://insights.sbomify.com/CVE-2014-8900/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-4481](https://insights.sbomify.com/CVE-2020-4481/): XML external entity in UrbanCode Deploy (high 8.2)
- [CVE-2016-0271](https://insights.sbomify.com/CVE-2016-0271/): Auth bypass in n/a (high 8.2)
- [CVE-2017-1149](https://insights.sbomify.com/CVE-2017-1149/): XML external entity in UrbanCode Deploy (high 8.1)
- [CVE-2016-0267](https://insights.sbomify.com/CVE-2016-0267/): Information disclosure in n/a (high 7.7)
- [CVE-2016-2942](https://insights.sbomify.com/CVE-2016-2942/): Command injection in UrbanCode Deploy (high 7.5)
- [CVE-2016-6068](https://insights.sbomify.com/CVE-2016-6068/): Information disclosure in UrbanCode Deploy (high 7.5)
- [CVE-2016-9008](https://insights.sbomify.com/CVE-2016-9008/): Missing authorization in UrbanCode Deploy (high 7.5)
- [CVE-2024-55904](https://insights.sbomify.com/CVE-2024-55904/): IBM DevOps Deploy / IBM UrbanCode Deploy command injection (high 7.2)
- [CVE-2026-12085](https://insights.sbomify.com/CVE-2026-12085/): Information disclosure in UCD - IBM DevOps Deploy (medium 6.5)
- [CVE-2017-1286](https://insights.sbomify.com/CVE-2017-1286/): Information disclosure in n/a (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/urbancode-deploy/