IBM Concert vulnerabilities
92 vulnerabilities
Known vulnerabilities in IBM Concert, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-6930ibmconcert
EPSS score0.17%
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.CVE-2026-15661ibmconcertEPSS score0.31%
IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.CVE-2026-6719ibmconcertEPSS score0.42%
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.CVE-2026-4413ibmconcertEPSS score0.27%
IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2026-4405ibmconcertEPSS score0.16%
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.CVE-2026-3628ibmconcertEPSS score0.33%
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.CVE-2026-3303ibmconcertEPSS score0.26%
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.CVE-2026-1510ibmconcertEPSS score0.12%
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.CVE-2026-1501ibmconcertEPSS score0.11%
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.CVE-2025-13044ibmconcertEPSS score0.14%
IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.CVE-2025-1759ibmconcert+1EPSS score0.33%
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.CVE-2025-1722ibmconcertEPSS score0.40%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.CVE-2025-1761ibmconcert+1EPSS score0.36%
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.CVE-2025-1721ibmconcertEPSS score0.33%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.CVE-2025-1719ibmconcertEPSS score0.40%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.CVE-2025-0656ibmconcert+1EPSS score0.21%
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2025-36159ibmconcertEPSS score0.11%
IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.CVE-2025-36149ibmconcert+1EPSS score0.18%
IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.CVE-2025-36161ibmconcertEPSS score0.21%
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.CVE-2025-36158ibmconcertEPSS score0.11%
IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.