Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2025-24080 CVE-2025-33100 · GHSA-wfr8-cv9p-f2rv

IBM Concert Software information disclosure

Priority LOW 32

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encry…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00188 Published 2025-08-18 No fix listed CWE-798
TI-2025-24074 CVE-2025-33090 · GHSA-79wj-68r3-h5hv

IBM Concert Software denial of service

Priority LOW 39

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2025-08-18 No fix listed CWE-1333
Priority MEDIUM 42

IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00233 Published 2025-08-18 No fix listed CWE-942
Priority LOW 33

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00361 Published 2025-08-18 No fix listed CWE-244
TI-2024-33279 CVE-2024-49827 · GHSA-wj6f-phfq-g2gw

IBM Concert Software information disclosure

Priority LOW 32

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00259 Published 2025-08-18 No fix listed CWE-213