עברית

Vulnerability Intelligence

CVE-2025-13489

Medium 5.9

Published
Last modified
NVD status
Modified

Description

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected products

ibm: devops deploy

References1

Metrics

CVSS 3.1
5.9 MEDIUM Score source: NVD CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS — exploit probability
0% percentile: 9 · as of 11 November 2026
CWE
CWE-319

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.