Known vulnerabilities in UrbanCode Build

Vendor: IBM Corporation
Software: UrbanCode Build
Software CPE: cpe:2.3:a:ibm_corporation:urbancode_build:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 36
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting UrbanCode Build UrbanCode Build is affected by 36 known vulnerabilities: 1 critical, 5 high, 28 medium, 2 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 - 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 - 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 - 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU112274 - Improper input validation
CVE-2025-52434		 CWE-20 Medium
No
No
 - 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU111210 - Improper input validation
CVE-2025-41234		 CWE-20 Medium
No
No
 - 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 - 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 7.0.0 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 7.0.0 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 7.0.0 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 6.1.7.10 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 6.1.7.10 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 6.1.7.10 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU74202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-4065		 CWE-22 High
No
No
 6.1.7.10 30.03.2023 SB2023033036
SB2023033043
SB2023102718
and 4 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 6.1.7.10 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 6.1.7.10 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 6.1.7.10 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 6.1.7.10 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more


Showing elements 1 - 20 out of 36