CVE-2024-22349

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.

Scoring

Severity

MEDIUM

CVSS base score

4

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.21%

CWE

CWE-525

Published

2025-01-20

Last modified

2026-03-13

Affected products

• IBM UrbanCode Velocity
• IBM DevOps Velocity

Weakness type

• CWE-525

Related vulnerabilities

• CVE-2026-13697 — undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
• CVE-2024-23571 — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate...
• CVE-2026-41918 — A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)....
• CVE-2026-41322 — @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed
• CVE-2025-15554 — Admin Passwords Cached by Browsers in Truesec LAPSWebUI
• CVE-2025-36364 — IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
• CVE-2026-27514 — Tenda F3 Plaintext Credential Exposure in Configuration Download
• CVE-2026-24437 — Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

Markdown version · Browse all CVEs