VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jun 30, 2026· Updated Jul 2, 2026

CVE-2026-12084

CVE-2026-12084

Description

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

Affected products

2
  • IBM/Devops Deploy2 versions
    cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*range: >=8.1.0.0,<8.1.2.7
    • (no CPE)range: 8.1 - 8.1.2.6, 8.2 - 8.2.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.