Ibm

Concert

41 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-36150

  • EPSS 0.02%
  • Veröffentlicht 24.11.2025 20:29:19
  • Zuletzt bearbeitet 01.12.2025 15:51:16

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

5.4

CVE-2025-36149

  • EPSS 0.03%
  • Veröffentlicht 21.11.2025 19:38:47
  • Zuletzt bearbeitet 02.12.2025 16:22:26

IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.

6.1

CVE-2025-36153

  • EPSS 0.06%
  • Veröffentlicht 20.11.2025 21:21:04
  • Zuletzt bearbeitet 21.11.2025 19:50:43

IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials ...

5.5

CVE-2025-36158

  • EPSS 0.01%
  • Veröffentlicht 20.11.2025 21:19:26
  • Zuletzt bearbeitet 21.11.2025 19:50:06

IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.

5.5

CVE-2025-36159

  • EPSS 0.01%
  • Veröffentlicht 20.11.2025 21:17:47
  • Zuletzt bearbeitet 21.11.2025 19:49:32

IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.

7.5

CVE-2025-36160

  • EPSS 0.04%
  • Veröffentlicht 20.11.2025 21:15:35
  • Zuletzt bearbeitet 21.11.2025 19:46:50

IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system.

5.9

CVE-2025-36161

  • EPSS 0.02%
  • Veröffentlicht 20.11.2025 15:26:29
  • Zuletzt bearbeitet 24.11.2025 14:47:51

IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using...

5.4

CVE-2025-36085

  • EPSS 0.03%
  • Veröffentlicht 28.10.2025 15:16:12
  • Zuletzt bearbeitet 31.10.2025 18:55:51

IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other att...

5.5

CVE-2025-36083

  • EPSS 0.01%
  • Veröffentlicht 28.10.2025 14:55:35
  • Zuletzt bearbeitet 31.10.2025 18:59:03

IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.

5.3

CVE-2025-36081

  • EPSS 0.04%
  • Veröffentlicht 28.10.2025 14:53:10
  • Zuletzt bearbeitet 31.10.2025 19:01:21

IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.