Ibm

Concert

31 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-52891

  • EPSS 0.07%
  • Published 07.01.2025 12:15:25
  • Last modified 18.07.2025 13:39:22

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

7.5

CVE-2024-52367

  • EPSS 0.09%
  • Published 07.01.2025 12:15:24
  • Last modified 18.07.2025 13:38:31

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an unauthorized actor that could be used in further attacks against the system.

5.9

CVE-2024-52366

  • EPSS 0.03%
  • Published 07.01.2025 12:15:24
  • Last modified 18.07.2025 13:37:53

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtai...

9.8

CVE-2024-52360

  • EPSS 0.18%
  • Published 19.11.2024 20:15:32
  • Last modified 18.07.2025 13:37:40

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

8.8

CVE-2024-52359

  • EPSS 0.08%
  • Published 19.11.2024 20:15:31
  • Last modified 18.07.2025 13:37:13

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.

6.5

CVE-2024-37070

  • EPSS 0.15%
  • Published 19.11.2024 20:15:30
  • Last modified 18.07.2025 13:37:00

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.

5.9

CVE-2024-43189

  • EPSS 0.04%
  • Published 15.11.2024 15:15:07
  • Last modified 18.07.2025 13:36:31

IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive informat...

6.1

CVE-2024-41785

  • EPSS 0.18%
  • Published 15.11.2024 15:15:07
  • Last modified 18.07.2025 13:36:43

IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...

9.8

CVE-2024-43177

  • EPSS 0.09%
  • Published 22.10.2024 15:15:07
  • Last modified 25.10.2024 16:05:15

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

3.7

CVE-2024-43173

  • EPSS 0.07%
  • Published 22.10.2024 15:15:06
  • Last modified 25.10.2024 15:40:19

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.