Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Advisory: IBM Concert — ibm.com/support/pages/node/7292374 Clear all filters
TI-2026-76512 CVE-2026-1501 · GHSA-grhr-76h5-c682

Improper certificate validation in IBM Concert

Priority LOW 16

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.0009 Published 2026-10-19 No fix listed CWE-295
TI-2026-76513 CVE-2026-1510 · GHSA-7qvv-m252-h2g7

IBM Concert Improper Clearing of Heap Memory

Priority LOW 21

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00129 Published 2026-10-19 No fix listed CWE-244
TI-2026-76516 CVE-2026-3303 · GHSA-m52p-rqhq-p69f

Permissive cross-domain policy in IBM Concert allows privileged actions

Priority LOW 17

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00222 Published 2026-10-19 No fix listed CWE-942
TI-2026-76519 CVE-2026-4413 · GHSA-639w-7rch-vjcx

Cross-site scripting in IBM Concert web UI

Priority LOW 27

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00211 Published 2026-10-19 No fix listed CWE-79
TI-2026-76521 CVE-2026-6719 · GHSA-mppm-vxf7-g245

Weak cryptographic algorithms in IBM Concert expose sensitive data

Priority LOW 39

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2026-10-19 No fix listed CWE-330
TI-2026-76522 CVE-2026-6930 · GHSA-wcgf-jf66-4mqx

Risky cryptographic algorithm in IBM Concert exposes sensitive data

Priority LOW 32

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00152 Published 2026-10-19 No fix listed CWE-327
TI-2026-76524 CVE-2026-15661 · GHSA-ppvq-79rq-hjrj

IBM Concert Improper Output Neutralization for Logs

Priority LOW 30

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-19 No fix listed CWE-117