Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Concert Software — ibm.com/support/pages/node/7232169 Clear all filters
TI-2024-36968 CVE-2024-55910 · GHSA-9qwv-3x3p-rg99

IBM Concert Software server-side request forgery

Priority LOW 34

IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00253 Published 2025-05-02 No fix listed CWE-918
TI-2024-36970 CVE-2024-55913 · GHSA-c89j-4hr5-cjph

IBM Concert Software path traversal

Priority LOW 31

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2025-05-02 No fix listed CWE-22
TI-2024-36969 CVE-2024-55912 · GHSA-qcrf-63xx-3cw2

IBM Concert Software information disclosure

Priority LOW 26

IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00216 Published 2025-05-02 No fix listed CWE-327
TI-2024-36967 CVE-2024-55909 · GHSA-g5c7-6mfq-qvc9

IBM Concert Software denial of service

Priority LOW 29

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00399 Published 2025-05-02 No fix listed CWE-409