DevOps Velocity vulnerabilities

2 known vulnerabilities in DevOps Velocity from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  UrbanCode Velocity: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2024-22348Jan 20, 2025IBM

  IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to onl

• 7.5 High severity

  UrbanCode Velocity: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2024-22347Jan 20, 2025IBM

  IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.