VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jan 20, 2025· Updated Jul 27, 2026

CVE-2024-22348

CVE-2024-22348

Description

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • HCLTech/Devops Velocity
    cpe:2.3:a:hcltech:devops_velocity:5.0.0:*:*:*:*:*:*:*
  • IBM/DevOps Velocitycpe-rescue2 versions
    cpe:2.3:a:ibm:devops_velocity:5.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:devops_velocity:5.0.0:*:*:*:*:*:*:*range: 5.0.0
    • (no CPE)range: 5.0.0
  • IBM/Urbancode Velocity3 versions
    cpe:2.3:a:ibm:urbancode_velocity:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:urbancode_velocity:*:*:*:*:*:*:*:*range: >=4.0.0,<=4.0.15
    • cpe:2.3:a:ibm:urbancode_velocity:4.0.0:*:*:*:*:*:*:*range: 4.0.0
    • (no CPE)range: 4.0.0 - 4.0.25

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.